Document

Fact Sheet #16 - Health-Care Requirement for Strong Encryption

Summary  The Office of the Information and Privacy Commissioner, in Order HO-004 and Order HO-007, required that health information be safeguarded at all times, specifically by ensuring that any personal health information stored on any mobile devices (e.g., laptops, memory sticks, PDAs) be strongly encrypted.This Fact Sheet paper provides a working definition of strong encryption and discusses the minimum functional and technical requirements of what may be considered to be strong encryption in a health-care environment. These, in turn, will provide procurement criteria that, if met, will ensure that personal health information stored on encrypted mobile devices or storage media will remain accessible to authorized users, but no one else. Revised November 2010
Published Date  Jul 16, 2010


<< Back
Back to Top
To search for a specific word or phrase, use quotation marks around each search term. (Example: "smart meter")