Indent

@indent

Q :How many HIPAA defined permissions exist?

A: Permissions in most compliance contexts refer to predefined access control mechanisms.

In HIPAA (Health Insurance Portability and Accountability Act) though, a permission is a reason under HIPAA for disclosing patient information. There are six HIPAA defined permissions used to disclose Protected Health Information (PHI):

1. disclosures to patients
2. for treatment, payment, or health care operations
3. disclosures with opportunity to agree or object
4. limited incidental disclosures
5. public interest and benefit activities
6. in a limited data set

When it comes to access control, HIPAA is much less prescriptive.

HIPAA outlines security and privacy requirements, and the implementation of access controls is left up to organizations based on their unique needs and risk assessments. These access controls often involve the use of technical and administrative safeguards like user authentication, role-based access control (RBAC), and encryption.

In healthcare, getting access to patient data quickly is often critical. It’s also imperative to safeguard that data from improper access. By granting role-based, auto-expiring data access with Indent, organizations are able to fulfill their compliance obligations without slowing their teams down.

Want to learn more about Indent? Feel free to schedule time that works for you and we're happy to answer any questions you have!