W. Va. Code R. § 65-28-13 - Security Safeguards

13.1. The Network shall develop and implement appropriate administrative, physical, and technical safeguards designed to protect the privacy and security of any protected health information and personal demographic information that it receives, creates, discloses, or uses under its health information exchange.

13.2. At a minimum, these security safeguards shall comply with the requirements set forth in the HIPAA security rules codified at 45 C.F.R. §§164.306, 164.308, 164.310, 164.312, and 164.316.

13.3. The Network's development and implementation of security safeguards shall remain consistent over time with new developments and changes. Accordingly, the intent of the Network is that the safeguards required by the HIPAA security rules are minimum safeguards. When necessary or appropriate, these safeguards may be amended, modified, or enhanced to keep pace with evolving technologies, new industry standards, and legal requirements that may become applicable in the future.

Notes

W. Va. Code R. § 65-28-13