William H. Magill on 4 Nov 2005 03:07:26 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] OT? Costs of set-up and ownership, dedicated server


On 03 Nov, 2005, at 19:26, Lee Marzke intoned:
If HIPPA doesn't interfere, outsourcing can be pretty inexpensive, you get business
quality IMAP email, and you can always mirror some or all of the messages to a
local server for backup or availability reasons. Since Internet messages
are already sent un-encrypted, having the messages password protected on a remote
server is not all that more insecure.

HIPPA will interfere.

Any vendor which IS HIPPA compliant will charge for that compliance.
Amongst other things, it means that they get annual audits to maintain
that compliance certification.

Any vendor which does NOT or will not certify that they are HIPPA compliant
is a red-flag (or should be) for your folks.


Note also that HIPPA compliance applies to E-mail as well ... ANYTHING which
might have patient data in it!
The burden of proof of compliance is on the entity obtaining the data.


HIPPA is a very heavyweight (some say heavy handed) set of regulations.

If your department is part of a larger entity, they most likely have their
own HIPPA Compliance organization (they must have a Compliance Officer),
which has its own set of rules and regulations you need to follow.
I would be quite surprised if they allowed outsourcing of a departmental
server.



T.T.F.N. William H. Magill # Beige G3 [Rev A motherboard - 300 MHz 768 Meg] OS X 10.2.8 # Flat-panel iMac (2.1) [800MHz - Super Drive - 768 Meg] OS X 10.4.1 # PWS433a [Alpha 21164 Rev 7.2 (EV56)- 64 Meg] Tru64 5.1a # XP1000 [Alpha 21264-3 (EV6) - 256 meg] FreeBSD 5.3 # XP1000 [Alpha 21264-A (EV 6.7) - 384 meg] FreeBSD 5.3 magill@mcgillsociety.org magill@acm.org magill@mac.com whmagill@gmail.com


___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug