Home Table of Contents

§ 126074. Security Requirements -- Physical Controls.

22 CA ADC § 126074Barclays Official California Code of Regulations

Barclays California Code of Regulations
Title 22. Social Security
Division 14. California Office of Health Information Integrity
Chapter 1. Demonstration Projects for the Electronic Exchange of Health Information
22 CCR § 126074
§ 126074. Security Requirements -- Physical Controls.
Currentness
(a) Mobile Electronic Device Controls. A Demonstration Project Participant shall limit and protect any storage of IHI on mobile electronic computing devices and passive storage media. A Demonstration Project Participant shall limit and protect any storage of IHI on mobile electronic computing devices and passive storage media. A Demonstration Project Participant shall have a policy directing all workforce members, using entity-issued or any non-managed (user-owned) devices or media, to adhere to the entity mobile electronic computing device requirements. Storage of IHI on mobile computing devices and passive storage media is prohibited unless the devices or IHI:
(1) Are encrypted where indicated by risk assessment, and
(2) Legacy medical devices may require alternative controls in lieu of standard controls as allowed by device manufacturers, such deviations from standard controls shall be documented.

Credits

Note: Authority cited: Sections 130277 and 130278, Health and Safety Code. Reference: Sections 1798.21 and 1798.81.5, Civil Code; Sections 1280.15, 130200, 130277 and 130279, Health and Safety Code; and 45 C.F.R. Section 164.308(a)(7).
History
1. New section filed 1-31-2012; operative 1-31-2012. Exempt from the rulemaking requirements of the Administrative Procedure Act and submitted to OAL for printing only pursuant to Health and Safety Code section 130278 (Register 2012, No. 5).
This database is current through 4/26/24 Register 2024, No. 17.
Cal. Admin. Code tit. 22, § 126074, 22 CA ADC § 126074
End of Document