I agree with bshirley. Your surface of vulnerability is much greater if you are storing many records about many people on the device. But if you are only storing limited info about one person temporarily - as when conducting a query for prescription info or gathering information about a current health problem - then the risk is much lower. Of course you also need to consider whether the hacked phone presents a security risk to the online data, that is, does the app on the phone enable a wrong user to access protected data online?
发布评论
评论(1)
我同意布雪莉的观点。如果您在设备上存储许多人的许多记录,那么您的脆弱性就会更大。但是,如果您只是暂时存储一个人的有限信息(例如在查询处方信息或收集有关当前健康问题的信息时),那么风险就会低得多。当然,你还需要考虑被黑的手机是否会对在线数据带来安全风险,即手机上的应用程序是否会导致错误的用户访问受保护的在线数据?
以下是您可能会觉得有用的应用说明:“Formotus™ 移动解决方案和 HIPAA 合规性”
I agree with bshirley. Your surface of vulnerability is much greater if you are storing many records about many people on the device. But if you are only storing limited info about one person temporarily - as when conducting a query for prescription info or gathering information about a current health problem - then the risk is much lower. Of course you also need to consider whether the hacked phone presents a security risk to the online data, that is, does the app on the phone enable a wrong user to access protected data online?
Here's an application note you may find helpful: "Formotus™ Mobile Solutions and HIPAA Compliance"