To protect e-PHI that is sent through the Internet, a covered entity must use encryption technology to minimize the risks.E-PHI that is "at rest" must also be encrypted to maintain security.

Question

Quizplus · Accepted Answer

Encryption is a recommended best practice for e-PHI at rest, but it is not explicitly required by HIPAA. However, e-PHI transmitted over the internet must be encrypted to comply with HIPAA's Security Rule.

To Protect E-PHI That Is Sent Through the Internet, a Covered