Health Information Privacy and Security


Digitah Health Service Commission White Paper

Enhancing Privacy and Security of Protected Health Information in the State of Utah


Publicaly available resources for education and training on health information privacy and security include:

A.ONC Provider HIPAA training games

B. ONC Mobile Device Privacy anf Security on YouTube

C. HIMSS Provider security tool kit

D. Utah Regional Extension Center at HealthInsight

E. Health Information Technology Certificate of Completion Program at Salt LAke Community College

F. Course: Free online courses in information Security, Information Systems/Computer science and

G. Cyber Security Awareness Video: Amazing mind reader reveals his 'gift'

H. The DHSC developed the following check list of points for consideration of a HIT security assessment

I. EHR Security

Health Information Portability and Accountability Act (HIPAA)

Are you a HIPAA covered entity??

What health information is protected by the Privacy and Security Rule?

When can PHI be used for research?

Understanding the Security Rule - This NIST Special Publication helps to educate readers about information security terms used in the HIPAA Security Rule and to improve understanding of the meaning of the security standards set out in the Security Rule.This document addresses only the security standards of the Security Rule.

Security Rule Standards, key activities, questions to consider for administrative, physical and technical safeguards.

Risk Assessment Guidelines

Contingency Planning Guidelines

Remote Use, Access and Telework Security Considerations

Tools to assess compliance

  • NIST HIPAA Security Toolkit Application is intended to help organizations better understand the requirements of the HIPAA Security Rule, implement those requirements, and assess those implementations in their operational environment.

Federal Privacy Laws

Compendium of Federal Privacy Laws (Center for Democracy and Technology)


The Security Mirage

Training Modules

ONC web-based security training module, CyberSecure: Your Medical Practice. Play the Game Now (Training)

Utah HISPC (Archive)