Healthcare Information Technology

Become EPCS Certified

Certify your EHR or ePrescribing Application as Electronic Prescriptions for Controlled Substances. Learn more »

Determine If Your Healthcare Security Product Is Ready for HHS Breach Safe Harbor Certification

Use our free SecureEHR Online Product Profile to assess whether your Healthcare product qualifies for HHS Safe Harbor from Breach Reporting. Learn More »

Understand InfoGard's EHR Certification Process

cert_seal_sm.png

Use InfoGard's ONC-ATCB Process for decrypting technical language and guiding you through the procedures for becoming EHR certified.
Learn More »

InfoGard is now providing Breach Safe Harbor Certification of Health InformationTechnology (HIT) products and Security solutions that comply with Breach Safe Harbor requirements. This certification offers Healthcare providers confidence that the HIT products they select meet the Breach Notification Rule requirements for a Safe Harbor as designated by the Health Insurance Portability and Accountability Act (HIPAA)/Health Information Technology for Economic and Clinical Health (HITECH) Act Breach Notification Rule.

Under the Breach Notification Rule, a Safe Harbor is established that relieves Healthcare providers from reporting requirements and being fined penalties when Protected Health Information (PHI) is “breached,” e.g., lost or stolen. This Breach Safe Harbor is afforded when PHI is protected by HIT products in compliance with specified National Institute of Standards and Technology (NIST) Standards and Guidances.

Breach Safe Harbor requirements were established under the HIPPA/HITECH Breach Notification Rule by the HHS Interim Final Rule (45 CFR Parts 160 and 164), which relies on Federal Information Processing Standard 140-2 (FIPS 140-2) to provide the cryptographic security requirements as the basis of the Breach Safe Harbor.  See the following for details:

InfoGard's Approach to Breach Safe Harbor Certification

InfoGard's Breach Safe Harbor Certification is designed to facilitate a Security solution’s Federal Information Processing Standard (FIPS) 140-2 Compliance Validation. Safe Harbor Certification may be obtained with modest additional effort for products that have current FIPS 140-2 validations or are undergoing validation concurrent with our Safe Harbor Certification.

If your product has not yet undergone FIPS 140-2 validation, InfoGard can help. With nearly 20 years of experience performing FIPS 140 validations, we have developed a wide range of services to assist Security solution providers prepare for and undergo successful validation.

Your Breach Safe Harbor Certification will be publicly posted together with information that describes your product and indicates how it can be used to achieve Safe Harbor protection.

If you are interested in applying for Safe Harbor Certification of your HIT solution, or if you want to learn more about this program, please call us at 805.783.0810 or use our Contact Form.