HIPAA (Health Insurance Portability and Accountability Act) Handbook

Policies and procedures designed to clearly demonstrate how the entity will protect electronic protected health information.

Controlling physical access to protect against inappropriate access to protected data.

Controlling access to computer systems and enabling covered entities to protect communications containing PHI transmitted electronically over open networks from being intercepted by anyone other than the intended recipient.

Requirements for business associate contracts, group health plans, and other arrangements.

Implement and maintain written policies, procedures and documentation