Skip to Content

Security of Health Information in Indiana

Hospitals in Indiana are required to have services to ensure the proper and secure filing and retrieval of medical records for every individual treated in the hospital. The law requires the hospital to have a system of author identification and record maintenance for every record that ensures the integrity of the authentication and protects the security of all record entries.  Each entry must be authenticated promptly in accordance with hospital policy.1

 

Footnotes

  • 1. 410 Ind. Admin. Code 15-1.5-4

 

Security of Health Information in Indiana

Subtopic Statute/Regulation Description
Unauthorized access or disclosure of health information (Cross reference Privacy & Confidentiality) Informed Consent – 844 Ind. Admin. Code 5-3-5 A written agreement must be used that documents the patient’s informed consent for the use of patient-physician email.  The agreement must...
Security of health information in hospitals or other health care facilities (Cross reference Health Information Technology): Passwords Informed Consent – 844 Ind. Admin. Code 5-3-5 A written agreement must be used that documents the patient’s informed consent for the use of patient-physician email.  The agreement must...
Security of health information in hospitals or other health care facilities (Cross reference Health Information Technology): Other methods of protecting electronic information Informed Consent – 844 Ind. Admin. Code 5-3-5 A written agreement must be used that documents the patient’s informed consent for the use of patient-physician email.  The agreement must...
Security of health information in hospitals or other health care facilities (Cross reference Health Information Technology): Encryption Informed Consent – 844 Ind. Admin. Code 5-3-5 A written agreement must be used that documents the patient’s informed consent for the use of patient-physician email.  The agreement must...
Penalties for violating the security of health information Informed Consent – 844 Ind. Admin. Code 5-3-5 A written agreement must be used that documents the patient’s informed consent for the use of patient-physician email.  The agreement must...
Storage of health information in a secure location (Cross reference Medical Record Collection) Requirements for Medical Record Maintenance and Administration in Hospitals – 410 Ind. Admin. Code 15-1.5-4 The medical record services has administrative responsibility for the medical records that are maintained for every individual evaluated or treated...