--- title: "Electronic Health Records: Are You in Compliance?" description: The government is setting deadlines for physicians to make the switch to electronic health records and announced plans to penalize those who do not switch. --- [![Goosman Lawfirm](https://blog.goosmannlaw.com/hs-fs/hubfs/Goosmannlaw%20October2017/images/Goosmann_Law_Firm_logo_4C-white.png?width=1250&name=Goosmann_Law_Firm_logo_4C-white.png "Goosman Lawfirm")](http://goosmannlaw.com/) - [COVID-19 Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/) - Our Team - [Attorneys](https://goosmannlaw.com/attorneys/) - [Non-Attorney Staff](https://http://goosmannlaw.com/non-attorney-staff/) - Practices & Industries - [Practices](https://goosmannlaw.com/practices/) - [Banking & Finance](https://goosmannlaw.com/banking-finance/) - [Bankruptcy, Restructuring & Workouts](https://goosmannlaw.com/bankruptcy-restructuring-workouts/) - [Business](https://goosmannlaw.com/business/) - [Divorce & Family Law](https://goosmannlaw.com/divorce-family-law/) - [Employment](https://goosmannlaw.com/employment-law/) - [Environmental, Health & Safety](https://goosmannlaw.com/health-safety/) - [Estate Planning](https://trustlawcounsel.com) - [Gestational Surrogacy & Adoption](https://goosmannlaw.com/gestational-surrogacy-adoption/) - [International Law](http://goosmannlaw.com/international-law/) - [Litigation / Trial Law](https://goosmannlaw.com/litigation-trial-law/) - [Local Counsel](https://http://goosmannlaw.com/local-counsel/) - [Mergers & Acquisitions](https://goosmannlaw.com/mergers-acquisitions/) - [Rapid Response](https://goosmannlaw.com/rapid-response/) - [Industries](https://goosmannlaw.com/industries/) - [Agribusiness & Cooperatives](https://goosmannlaw.com/agribusiness-cooperatives/) - [Construction](https://goosmannlaw.com/construction/) - [Cyber Law and Telecommunications](https://goosmannlaw.com/cyber-law/) - [Education](https://goosmannlaw.com/education/) - [Health Care](https://goosmannlaw.com/health-care/) - [Manufacturing](https://goosmannlaw.com/manufacturing-law/) - [Multifamily Housing](https://goosmannlaw.com/multifamily-housing-law/) - [Non-Profit & Tax Exempt Organizations](https://goosmannlaw.com/non-profit-law/) - [Real Estate](https://goosmannlaw.com/real-estate/) - [Transportation](https://goosmannlaw.com/transportation/) - [Tribal](https://goosmannlaw.com/tribal/) - Our Firm - [Firm News](https://blog.goosmannlaw.com/firm-news) - Careers - [Attorneys](https://goosmannlaw.com/careers/attorneys/) - [Administration](https://goosmannlaw.com/careers/administration/) - [Internships](https://goosmannlaw.com/careers/internships/) - [Client Testimonials and Results](https://goosmannlaw.com/our-firm/client-testimonials-and-results/) - [Culture, Diversity, and Community](https://http://goosmannlaw.com/our-firm/culture-diversity-and-community/) - [Women-Owned Business](https://goosmannlaw.com/our-firm/women-owned-business/) - [Associations & Memberships](https://goosmannlaw.com/associations-memberships/) - [Firm History](https://goosmannlaw.com/firm-history/) - Blogs - [CEO Law Review](https://blog.goosmannlaw.com/ceo-on-your-side) - [Construction Lawyer](https://blog.goosmannlaw.com/construction-lawyer-on-your-side) - [Cyber Lawyer](https://blog.goosmannlaw.com/cyber-lawyer-on-your-side) - [Deal Maker](https://blog.goosmannlaw.com/deal-maker-on-your-side) - [Divorce Docket](https://blog.goosmannlaw.com/divorce-lawyer-on-your-side) - [Food for Thought](https://blog.goosmannlaw.com/agricultural-lawyer-on-your-side) - [HR Legal Insider](https://blog.goosmannlaw.com/human-resources-on-your-side) - [Law Doc](https://blog.goosmannlaw.com/health-lawyer-on-your-side) - [Paralegal Review](https://blog.goosmannlaw.com/paralegal-review/) - [Real Estate Lawyer](https://blog.goosmannlaw.com/real-estate-lawyer-on-your-side) - [Risky Business](https://blog.goosmannlaw.com/risk-manager-on-your-side) - [The Banker’s Suit](https://blog.goosmannlaw.com/banking-lawyer-on-you-side) - [Trial Law Review](https://blog.goosmannlaw.com/trial-lawyer-on-you-side) - [Trust Law Counsel](https://blog.goosmannlaw.com/estate-planning-laywer-on-your-side) - Resources - [COVID-19 Resource Toolbox](https://goosmannlaw.com/covid-19-resource-toolbox/) - [Podcast](http://podcast.goosmannlaw.com/) - [Videos](https://goosmannlaw.com/videos/) - [FREE eBooks & Tools](https://goosmannlaw.com/free-ebooks-tools/) - Contact Us - [Office Locations](https://goosmannlaw.com/locations/) - [Sioux City Law Firm](https://goosmannlaw.com/locations/sioux-city-law-firm/) - [Sioux Falls Law Firm](https://goosmannlaw.com/locations/sioux-falls-law-firm/) - [Omaha Law Firm](https://goosmannlaw.com/locations/omaha-law-firm/) - [Spirit Lake & Spencer Law Firms](https://goosmannlaw.com/locations/spirit-lake-and-spencer-law-firm/) - [Real Estate Closings Office](https://goosmannlaw.com/locations/real-estate-closing-office/) - [Submit a Testimonial](https://goosmannlaw.com/submit-a-testimonial/) - [Sign Up for Our Newsletter](https://goosmannlaw.com/sign-up-for-our-newsletter/) - [Pay Online](https://goosmannlaw.com/pay-online-3/) - [  (855) 843-4531](tel:855-843-4531) ![](https://blog.goosmannlaw.com/hubfs/Blog_Images/Lockbox%20Lawyer/close-button.png) [tel:855-THE-GLF1](tel:855-THE-GLF1) [Health Lawyer](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/health-lawyer) # [Electronic Health Records: Are You in Compliance?](https://blog.goosmannlaw.com/health-lawyer-on-your-side/health-electronic-health-records-are-you-in-compliance) By [Goosmann Law Team](https://blog.goosmannlaw.com/health-lawyer-on-your-side/author/goosmann-law-team)   |  24, February 2015 [READ NOW](https://blog.goosmannlaw.com/health-lawyer-on-your-side/health-electronic-health-records-are-you-in-compliance) [Read Post](https://blog.goosmannlaw.com/health-lawyer-on-your-side/health-electronic-health-records-are-you-in-compliance#article) [![](https://blog.goosmannlaw.com/hs-fs/hubfs/Logos/Logo1.jpg?width=60&name=Logo1.jpg)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/author/goosmann-law-team) [Goosmann Law Team](https://blog.goosmannlaw.com/health-lawyer-on-your-side/author/goosmann-law-team)  Tags: [Health Lawyer](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/health-lawyer) The federal government is setting deadlines for physician practices to make the switch to electronic health records (EHRs) and recently announced plans to begin financially penalizing those practices which do not make this switch to EHRs. Although the final government rules regarding EHRs may be modified, the government has made it clear that financial penalties for not using EHRs will still be used. Because of these trends it is more and more important for health care providers, and other health-related entities, to ensure that they have taken proper steps to protect the privacy of health information that is available through cyberspace. In order to avoid legal liability for the disclosure of protected health information it is important to understand the requirements of the [Health Insurance Portability and Accountability Act](http://www.hhs.gov/ocr/privacy/) (HIPAA) security rule. ## **Overview of HIPAA Security Rule** The HIPPA [Security Rule](http://www.hhs.gov/ocr/privacy/hipaa/administrative/securityrule/) covers individuals’ electronic personal health information (ePHI) that is created, received, used or maintained by a covered entity. The Security Rule requires appropriate administrative, physical and technical safeguards to ensure the confidentiality, integrity, and security of ePHI. Under the [Health Information Technology for Economic and Clinical Health Act](http://www.hipaasurvivalguide.com/hitech-act-summary.php) (HITECH) of 2009 the scope of the HIPAA Security Rule expanded to include Business Associates as being responsible for the security and integrity of ePHI. ## **Who Is Covered by the HIPAA Security Rule?** By law, HIPAA applies only to “covered entities.” Which include: - Health Plans: health insurance plans, long-term care insurers, employer-sponsored group health plans, HMOs, etc. - Healthcare Clearinghouses: billing services, repricing companies, value-added networks - Health Care Providers who transmit health information in electronic form However, most health care providers and health plans do not carry out all patient-related functions themselves. Often billing, coding, records transcription services, etc. are completed by third-party entities, referred to as “[business associates](http://www.hhs.gov/ocr/privacy/hipaa/faq/business_associates/#businessassociate)” under HIPAA. Because of the expansion of the HITECH Act of 2009, business associates must also adhere to the HIPAA security rule. The inclusion of business associates under the HIPAA security rule broadly expands the scope of compliance and may catch many businesses, which are not traditional “health care” businesses by surprise. ## **What Information Is Protected Under the HIPAA Security Rule** While the HIPAA privacy rule protects the privacy of individually identifiable health information, the security rule applies only to individually identifiable health information that a covered entity creates, receives, maintains or transmits in electronic form. This information is referred to as ePHI. However, given the breadth of use of electronic media in the health care sector, the scope of the security rule is immense and will only continue to grow. ## **General Requirements Under HIPAA Security Rule** Covered entities and business associates must maintain reasonable and appropriate administrative, technical, and physical safeguards to protect ePHI. These requirements include: - ensuring the confidentiality, integrity, and availability of all ePHI they create, receive, maintain or transmit. - identifying and protecting against reasonably anticipated threats to the security and integrity of the ePHI. - protecting against reasonably anticipated, impermissible uses or disclosures of ePHI. - ensuring compliance by their workforce. As part of these requirements, ePHI must not be available or disclosed to unauthorized persons. In addition, ePHI must not be altered or destroyed in an unauthorized manner. Furthermore, ePHI must be accessible and usable on demand by authorized personnel. The HIPAA security rule applies to all covered entities, whether it is a one-person office, or a multi-state hospital system. For more information on whether your business' EHRs are in compliance with HIPAA, contact the [Goosmann Law Firm](http://goosmannlaw.com) at [info@goosmannlaw.com](mailto:info@goosmannlaw.com) or (712) 226-4000.   ### Select Different CTA for each Post from Blog Editor [![New Call-to-action](https://no-cache.hubspot.com/cta/default/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422.png)](https://cta-redirect.hubspot.com/cta/redirect/489404/a8cefc17-3b9d-4de0-89cd-e60a64752422) ### Subscribe Our Blog Thanks for submission!! - Recent - Popular ### Posts by Topic - [Health Lawyer (18)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/health-lawyer) - [CMS (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/cms) - [CPC (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/cpc) - [Firm News (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/firm-news) - [MACRA (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/macra) - [Medicare Overpayments (1)](https://blog.goosmannlaw.com/health-lawyer-on-your-side/topic/medicare-overpayments) DISCLAIMER: The information in this blog post (“post”) is provided for general informational purposes only, and may not reflect the current law in your jurisdiction. By visiting this website, blog, or post you understand that there is no attorney client relationship between you and the Goosmann Law Firm attorneys and website publisher. No information contained in this post should be construed as legal advice from Goosmann Law Firm, PLC, or the individual author, nor is it intended to be a substitute for legal counsel on any subject matter. No reader of this post should act or refrain from acting on the basis of any information included in, or accessible through, this Post without seeking the appropriate legal or other professional advice on the particular facts and circumstances at issue from a lawyer licensed in the recipient’s state, country or other appropriate licensing jurisdiction. #### Let Us Know What You Thought about this Post. Put your Comment Below. [Previous Post](https://blog.goosmannlaw.com/health-lawyer-on-your-side/health-do-not-rest-on-your-laurels-with-your-electronic-health-records) ##### [Do Not Rest On Your Laurels with Your Electronic Health Records](https://blog.goosmannlaw.com/health-lawyer-on-your-side/health-do-not-rest-on-your-laurels-with-your-electronic-health-records) [Next Post](https://blog.goosmannlaw.com/health-lawyer-on-your-side/health-government-prepares-implement-penalties-doctors-using-paper-medical-records) ##### [Government Prepares to Implement Penalties for the Doctors Using Paper Medical Records](https://blog.goosmannlaw.com/health-lawyer-on-your-side/health-government-prepares-implement-penalties-doctors-using-paper-medical-records) ### Contact Info **Sioux City Location** P. 712-226-4000 F. (712) 224-4517 **Sioux Falls Location** P. (605) 371-2000 F. (605) 275-2039 **Omaha Location** P. (402) 280-7648 F. (402) 505-3967 --- [Disclaimer](http://goosmannlaw.com/list-all-blogs/disclaimer/) | [Privacy Policy](http://goosmannlaw.com/privacy-policy/) ### Locations **Sioux City Location** 410 5th Street Sioux City, IA 51101 **Sioux Falls Location** 5010 S. Minnesota Avenue, Suite 100 Sioux Falls, SD 57108 **Omaha Location** Advent Building 17838 Burke Street, Suite 250 Omaha, NE 68118 ![Goosmann](https://blog.goosmannlaw.com/hs-fs/hubfs/Blog_Images/Lockbox%20Lawyer/goosmann-white.png?width=250&name=goosmann-white.png "Goosmann") Goosmann Law Firm is a FULL SERVICE LAW FIRM with locations in Sioux City, Iowa, Sioux Falls, South Dakota, and Omaha, Nebraska. Goosmann Law attorneys are licensed to practice in Iowa, Nebraska, South Dakota, and North Dakota. Their attorney team's practices and industries include but are not limited to Agribusiness and Cooperatives, Banking and Finance, Bankruptcy, Restructuring and Workouts, Business, Construction, Cyber Law and Telecommunications, Divorce and Family Law, Education, Employment, Environmental Health and Safety, Gestational Surrogacy and Adoption, Health Care, Litigation and Trial Law, Manufacturing, Mergers and Acquisitions, Municipal, Nonprofit and Tax Exempt Organizations, Real Estate, and Transportation, Tribal, Wills, Trusts, Estate Planning, and Probate Law. Goosmann © Copyright 2017