Recovering from disaster while maintaining HIPAA compliance: an overview

According to the HIPAA Security Rule, organizations classified as “covered entities” must establish and implement policies and procedures for responding to emergency events that could damage systems containing electronic protected health information.

In simple terms, all covered entities are required to have a contingency plan.

This whitepaper outlines how to recover from a disaster while maintaining HIPPA compliance by: