HIPAA Data Transmission Security Policy Template

The HIPAA-compliant Data Transmission Security Policy Template is the perfect solution for businesses and organizations that must secure electronically transmitted confirmed Electronic Protected Health Information (ePHI). With this comprehensive template, you can easily ensure that ePHI is not improperly modified during transit or until it is disposed of. It will help you meet the rigorous data transmission security standards mandated by HIPAA Security Rule 45 CFR § 164.312(e). Implemented correctly, this template will provide a detailed level of protection over an organization’s ePHI.

HIPAA’s requirements as they relate to data in motion are complex and include rules regarding integrity, access control and encryption standards. This template offers specific policy steps for compliant transfers of ePHI including: instituting access controls; considering transmission media; analyzing technical switches; examining storage media; authenticating mobile devices and embarking in audit control measures. The data transmission security policy template helps your organization assess existing data transfer processes to determine where it needs to focus its efforts in order to comply with HIPAA regulations.

SAMPLE TEXT: ENTITY NAME has adopted this Data Transmission Security Policy in order to recognize the requirement to comply with the Health Insurance Portability and Accountability Act (“HIPAA”), as amended by the Health Information Technology for Economic and Clinical Health (“HITECH”) Act of 2009 (Title XIII of division A and Title IV of division B of the American Recovery and Reinvestment Act “ARRA”) and the HIPAA Omnibus Final Rule (Effective Date: March 26, 2013). We acknowledge that full compliance with the HIPAA Final Rule is required by or before September 23, 2013.

ENTITY NAME hereby acknowledges our duty and responsibility to protect the privacy and security of Individually Identifiable Health Information (“IIHI”) generally, and Protected Health Information (“PHI”) as defined in the HIPAA Regulations, under the regulations implementing HIPAA, other federal and state laws protecting the confidentiality of personal information, and under principles of general and professional ethics. We also acknowledge our duty and responsibility to support and facilitate the timely and unimpeded flow of health information for lawful and appropriate purposes.

Each of our HIPAA templates are in Microsoft Word (.docx) format for easy editing. Each template is guaranteed to be fully HIPAA & HITECH compliant when properly implemented.