--- title: Three crucial keys to understanding HIPAA compliance description: Three crucial keys to understanding HIPAA compliance --- [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/head-logo-2.svg "TowerWall")](https://towerwall.com/) [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/towerwall-logo-white-test.svg "TowerWall")](https://towerwall.com/) - [Our Partners](https://towerwall.com/how-we-protect-you/our-technology-partners/) - Our Solutions - - Our Cybersecurity Solutions - We operationalize infosec, building security solutions that safeguard your most critical assets. - - [Solutions Overview](https://towerwall.com/cybersecurity-solutions/) - [Risk Assessments & Security Reviews](https://towerwall.com/cybersecurity-solutions/risk-assessments-security-reviews/) - [Program & Policy Development](https://towerwall.com/cybersecurity-solutions/program-policy-development/) - [Incident Response & Remediation](https://towerwall.com/cybersecurity-solutions/incident-response-remediation/) - [Managed Detection & Response](https://towerwall.com/cybersecurity-solutions/managed-detection-response/) - - [Compliance & Privacy](https://towerwall.com/cybersecurity-solutions/compliance-privacy/) - [Comprehensive Security Training](https://towerwall.com/cybersecurity-solutions/comprehensive-security-training/) - [Vulnerability Protection](https://towerwall.com/cybersecurity-solutions/vulnerability-protection/) - [Penetration Testing](https://towerwall.com/cybersecurity-solutions/penetration-testing/) - Virtual Security Officers - - Virtual Security Officer - Leverage the experience and security acumen of Towerwall’s on-demand security experts. - - [Virtual Chief Information Security Officer (VCISO)](https://towerwall.com/virtual-security-officers/virtual-chief-information-security-officer-vciso/) - [Virtual Data Protection Officer (vDPO)](https://towerwall.com/virtual-security-officers/virtual-data-protection-officer-vdpo/) - [Virtual Chief Privacy Officer (vCPO)](https://towerwall.com/virtual-security-officers/virtual-chief-privacy-officer-vcpo/) - We Advise - - We Advise - One-size security solutions only lead to failure. - Industries - [Higher Education](https://towerwall.com/industries/higher-education/) - [Financial Services & Banking](https://towerwall.com/industries/financial-services-banking/) - [Healthcare](https://towerwall.com/industries/healthcare/) - [BioPharma & Bio-Therapeutics](https://towerwall.com/industries/biopharma-bio-therapeutics/) - [Retail](https://towerwall.com/industries/retail/) - [Government](https://towerwall.com/industries/government/) - [Catholic Diocese](https://towerwall.com/industries/catholic-diocese-cybersecurity/) - [Cannabis](https://towerwall.com/industries/cannabis/) - [Small Business](https://towerwall.com/industries/small-business/) - [Enterprise](https://towerwall.com/industries/enterprise/) - Trends & Threats - [Remote Workforce](https://towerwall.com/trends-threats/remote-workforce/) - [Vendor Questionnaire](https://towerwall.com/trends-threats/vendor-questionnaire/) - [HIPAA](https://towerwall.com/trends-threats/hipaa/) - [Ransomware](https://towerwall.com/trends-threats/ransomware/) - [GDPR](https://towerwall.com/trends-threats/gdpr/) - [Cloud Security](https://towerwall.com/trends-threats/cloud-security/) - [Phishing](https://towerwall.com/trends-threats/phishing/) - [Cybersecurity Insurance](https://towerwall.com/trends-threats/cybersecurity-insurance/) - [Resources](https://towerwall.com/resources/) - - Resources - Our latest insights, events, and tools to keep you safe. - - [Insights](https://towerwall.com/resources/?resources_category=MTU%3D&focusarea=0&industries=0&search=) - [Webinars](https://towerwall.com/resources/?resources_category=MTg%3D&focusarea=0&industries=0&search=) - [Whitepapers](https://towerwall.com/resources/?resources_category=MTY%3D&focusarea=0&industries=0&search=) - [View All](https://towerwall.com/resources/) - [Company](https://towerwall.com/company/) - - Our Company - We are the industry’s leading cybersecurity preparedness partner. - - [Who We Are](https://towerwall.com/company/) - [Our Team](https://towerwall.com/company/our-team/) - [Our Approach](https://towerwall.com/our-approach/) - [Our Values](https://towerwall.com/company/our-values/) - - [Awards & Recognition](https://towerwall.com/company/awards-recognition/) - [Certifications & Affiliations](https://towerwall.com/company/certifications-affiliations/) - [Community Involvement](https://towerwall.com/company/community-involvement/) - [Careers](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) Topics Health Insurance Portability & Accountability, protected health information (PHI), PIE, HIPAA, Compliance & Privacy, Compliance, cannabis, Enterprise # Three crucial keys to understanding HIPAA compliance [By Michelle Drolet](https://blog.towerwall.com/author/towerwall2020) [Read More](https://blog.towerwall.com/author/towerwall2020) 2 Minute Read October 30, 2017 You already know how important it is to be HIPAA compliant. A lot of businesses, including registered marijuana dispensaries, get confused about the requirements, when it comes to dealing with protected health information. It can get a little fuzzy, if you're not privy to the big picture. The Health Insurance Portability & Accountability Act was created in order to set a standard for safeguarding private patient information. Any entity dealing with this kind of protected health information (PHI) is required to ensure all the mandatory processes, network and physical security protocols have been put in place. Prior to these laws, there was no standard for securing PHI. As the medical, healthcare and other covered entities began to technologically advance, there was a movement away from the paper process. More and more businesses began to use electronic data systems to provide clinically based functions, answer eligibility questions and pay claims. ## Why is this important? Keep in mind the major goal of the HIPAA compliance law is to protect the privacy of individuals' PHI, while allowing covered businesses, including registered marijuana dispensaries, to work with new technologies. These technologies often assist and increase the efficiency and quality of the care provided. With the advance of these technologies comes increased risk of exposing PHI. Without the privacy rule, a patient's information could very likely, without patient consent, end up being passed on to their employer. This employer then could use the information to make personal decisions in the workplace. Another scenario could be a lender getting their hands on the patient's health information and then using that to deny the patient's application for a credit card, auto loan or home mortgage. In order to avoid this, it is imperative covered businesses do all they can to be HIPAA compliant. ## Three keys to compliance: PIE ### 1. Protect against wrongful and impermissible abuse of PHI and other unauthorized disclosures. This includes ensuring compliance by your workforce. ### 2. Identify and secure against any threats to the safety of all PHI. ### 3. Ensure the safety, integrity, confidentiality, privacy and accessibility of all PHI transmitted, maintained, received and/or created. A business associate can be any third party working with patient records and/or claims processing: accountants, attorneys, consultants, and registered marijuana dispensaries. If they service healthcare entities and have access to PHI, they are all included under HIPAA's definition of business associates. In summary, what you want to focus on is the big picture. Covered entities are required to protect patient health information. You are allowed to disclose PHI only to business associates whose services you use, granted you obtain satisfactory assurances. Therefore, your priority is to ensure your business associates will comply with HIPAA and safeguard the PHI they are transacting with throughout your relationship. Obtaining satisfactory assurances means getting it in writing, according to HIPAA compliance guidelines. [This article was originally posted on Worcester Business Journal>](http://www.wbjournal.com/article/20171030/PRINTEDITION/310279992) #### Three crucial keys to understanding HIPAA compliance Back to Top ## Related Insights ### [Cannabis and privacy compliance: Is your health information protected?](https://blog.towerwall.com/cannabis-privacy-compliance-health-information-protected) Health Insurance Portability & Accountability, protected health information (PHI), PIE, HIPAA, Compliance & Privacy, Compliance, cannabis, Enterprise ### [Marijuana Industry Brings Compliance to a High Bar](https://blog.towerwall.com/marijuana-industry-brings-compliance-high-bar) Health Insurance Portability & Accountability, protected health information (PHI), PIE, HIPAA, Compliance & Privacy, Compliance, cannabis, Enterprise [View All Insights](https://blog.towerwall.com) × ## Talk with us now about: #### Your security needs. - ![Phone](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/phone-icon.svg "Phone") [Call 774.204.0700](tel:774.204.0700) - ![Mail](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/mail-icon.svg "Mail") [Email Us](mailto:info@towerwall.com) ### The front line of cybersecurity.™ For over 23 years, Towerwall, a woman-owned business, has helped scores of companies safeguard their data and leverage their investment in IT with advanced information security technology solutions and services. Our experience in all facets of information security coupled with serving in the CIO/CISO/ISO roles provides a unique first-hand understanding of the security challenges organizations face daily. ### Connect - - - - - [Career Opportunities](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) © Towerwall, Inc. and its licensees. All rights reserved [Privacy Policy](http://towerwall.com/privacy-policy/) Sitemap [Created by Howbridge](https://meethowbridge.com/) [![Towerwall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/footer-logo.svg "Towerwall")](https://towerwall.com/)