thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

HIPAA Security Rule

HIPAA rule requiring administrative, physical, and technical safeguards for electronic PHI.

Definition

The Security Rule requires covered entities and business associates to ensure confidentiality, integrity, and availability of ePHI, conduct risk analysis, and implement safeguards. Implementation specifications are required or addressable; addressable means implement if reasonable and appropriate or document an equivalent alternative. HHS proposed significant updates in January 2025, including removing the addressable distinction, which had not been finalized as of this writing.

Example

A clinic documents a risk analysis and decides to encrypt laptops, an addressable specification.

Exam tip

Addressable does not mean optional; you must assess and document.

Related terms