Security and compliance

What HIPAA asks of clinic software, and the questions to put to a vendor before you sign.

HIPAA sets expectations for how a practice protects patient information, and the software a clinic runs is where most of those expectations turn into settings, contracts and logs. This topic looks at that software layer.

Everything here is general information. HHS publishes the rules and guidance, and your compliance officer or counsel has the final word on your own practice. The Toolkit's HIPAA software checklist points to the HHS pages that matter most.