Evaluation

The next Administrative Rules task is Evaluation. Evaluation requires agencies perform a periodic technical and non-technical evaluation based on the Security Rule Standards as well as any new environmental or operational changes affecting the security of EPHI.

We suggest that agencies review their Security Rule compliance at least annually to insure that compliance is being maintained. It should also be reviewed as part of any major organizational change such as a merger or change in services.