Discussion Locked

Hippa and Cell Phones

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am havign people ask me to have there smartphones sync (windows phones & iphones) with the xchange server.

How if any way does this violate hipaa compliance. In my opinion. With the mobile features of xchange, i can remotle wipe out any phone synced with the xchange server if i employee was to be let go are lost there mobile.

any thoughs?

2 replies

by caverdog

If HIPAA applies to you, it depends on what data your users are allowed to send via E-mail. If there is any PII information it is to be encrypted. Many smart devices do not encrypt. If your users are trained to not have Controlled information via E-mail, you're OK. Don't forget, a user sending information to another user does not go out of your environment and MAY not require encryption, but if it does go out of your environment (via E-mail or portable device) it does. Consider any device that leaves your site to be just like being on the internet. It is an untrusted environment.

This discussion is closed to new replies.