Need security on my site 2

[fdgsogc]

I am building a website that will include patient names and appointment times on the database. The application will only supply information to the specific patient.

What actions/procedures can I take to ensure the security of this data? That it will not be intercepted during transmission. That hackers will not be able to access the database etc. These are very general questions I know. I have some idea how I want to handle this. I would like your opinion on the good practices that are currently in use.

Thanks for your time.

 

[ArizonaGeek]

Consult a lawyer that deals in HIPAA laws. You very well could be setting yourself up for some legal trouble if done incorrectly.

I'd then get a web builder and web hosting company that deals specifically with the medical field as they understand the HIPAA laws and security involved with patient data.

Seriously, this is not something you can just slap together and stick on the web. There are hundreds of laws dealing with medical and patient information that, if broken, could cost you thousands if not millions of dollars.

Cheers
Rob

The answer is always "PEBKAC!

 

[chiph]

Like Rob says.

There are aspects to HIPAA that affect not only network security, but aaplication design as well.

For example, are patient names ever on the screen where the public can see them?
If so, you'll need to obscure them in some fashion.

Chip H.


____________________________________________________________________
If you want to get the best response to a question, please read FAQ222-2244 first

 

[brianinms]

I second the above comments, and additionally would add that you would be better with a commercial off the shelf application.