1. Home
2. Security
3. IT Risk and Compliance
4. HIPAA Security
5. FAQ's

Frequently Asked Questions

What if I am having trouble determining what ePHI is?

You should contact the University or Healthcare Privacy Officers by emailing Anne.Adams@emoryhealthcare.org or Kwest02@emory.edu and ask for help

I have a new system or application that needs to be HIPAA Compliant, what next?

You should first contact the HIPAA Working Group Member designated to your organization which can be found by going to HIPAA Contacts or you can email hipaaworkinggroup@emory.edu and we will take care of you

How can I prevent myself from having to do HIPAA Risk Assessments?

There are two main ways:

1. De-identify the data. This means that you have gone through procedures to remove all identifiers from the protected health information.
2. Stop storing unnecessary ePHI on your workstation or server. Many times this information is really not needed. Why not try storing this data on a secure remote location.