Section 14-52-88.3 - Compliance with HIPAA electronic security standards Under the Security Standards for the Protection of Electronic Protected Health Information (45 Code of Federal Regulations Part 164.300 et. seq., the "Security Standards"
(a) Implementation. The employer agrees to implement reasonable and appropriate administrative. physical, and technical safeguards to protect the confidentiality, integrity, and availability of Electronic Protected Health Information that the employer creates, maintains, or transmits on behalf of the plan. "Electronic Protected Health Information" shall have the same definition as set out in the Security Standards, but generally shall mean Protected Health Information that is transmitted by or maintained in electronic media.(b) Agents or subcontractors shall meet security standards. The employer shall ensure that any agent or subcontractor to whom it provides Electronic Protected Health Information shall agree, in writing, to implement reasonable and appropriate security measures to protect the Electronic Protected Health Information.(c) Employer shall ensure security standards. The employer shall ensure that reasonable and appropriate security measures are implemented to comply with the conditions and requirements set forth in section 14-52-88.2. Haw. Code R. § 14-52-88.3
[Eff and comp 12/2/2021] (Auth; HRS § 78-30) (Imp: HRS § 78-30)