PGP Corporation Logo
select United States productsPurchasedownloadssupportpartnersnewsroomcompanycareerscontact
.
.
.
.

The websites listed below provide general information about the Health Insurance Portability and Accountability (HIPAA) Act and US FDA - Title 21 Code of Federal Regulations Electronic Records; Electronic Signatures (21 CFR Part 11).

Department of Health and Human Services (HHS)
This key governmental site for HIPAA focuses on the Administrative Simplification subtitle of HIPAA and posts proposed rules with commentary: http://aspe.os.dhhs.gov/admnsimp/

This final rule adopts standards for the security of electronic protected health information (PHI) to be implemented by health plans, health care clearinghouses, and certain health care providers. It implements some of the requirements of the Administrative Simplification subtitle of HIPAA: http://a257.g.akamaitech.net/7/257/2422/14mar20010800/...

National Institute of Standards and Technology (NIST) NIST Special Publication 800-45 "Guidelines on Electronic Mail Security Recommendations of the National Institute of Standards and Technology": http://csrc.nist.gov/publications/nistpubs/800-45/sp800-45 [PDF: 1.07MB]

North Carolina Healthcare Information and Communications Alliance (NCHICA) NCHICA is a nonprofit consortium of more than 280 organizations dedicated to improving health care through information technology and secure communications: http://www.nchica.org/

Workgroup for Electronic Data Interchange (WEDI) WEDI provides information on electronic data interchange (EDI) in the health care field as well as information on resources for standard transactions: http://www.wedi.org/

Electronic Healthcare Network Accreditation Commission (EHNAC) The EHNAC website provides important information regarding HIPAA security accreditation: http://www.ehnac.org/

U.S. Food and Drug Administration, Office of Regulatory Affairs
The "Compliance Ref" section of this website provides updates and general information on a variety of regulations, including 21 CFR Part 11: http://www.fda.gov/ora/compliance_ref/part11/.

21CFRPart11.com
This website provides access to information on the rule; the latest conference, meeting, and seminar opportunities; links to vendors and consultants to help with compliance; and relevant publications. It also maintains an email discussion list with industry peers and government regulators to cover issues and concerns: http://www.21cfrpart11.com/.

.
.

"The Joint Association on Accreditation of Healthcare Organizations has reported breaches in nine hospitals. The courts decide whether a breach occurred due to human error or to negligent security policy. If they determine negligence is the reason for a breach, the fines can be huge. That's why we use PGP® encryption: Its reputation will stand up in court."

Sharon Finney, Information Security Administrator, DeKalb Medical Center

.
.