That is because there is no definitive list.
From what I gather on the legislation, it is generic enough to allow it to be interpreted differently by different companies. As with a lot of US based legislation, it has been produced to keep lawyers in business while they argue in court over whether something is in compliance or not.
You are asking the wrong type of people. The client's legal advisor's should be answering the question, then you find a solution to match the legal requirements.
Simon.
Main Topics
Browse All Topics





by: nprignanoPosted on 2006-05-19 at 19:40:58ID: 16723048
Sorry, I meant HIPAA compliance :)