Data Loss Prevention for HIPAA

Updated

This section describes how the Commvault  software addresses the following HIPAA rules:

  • "Implement technical policies and procedures for electronic information systems that maintain electronic protected health information to allow access only to those persons or software programs that have been granted access rights as specified in other Information Access Management standards in HIPAA.” (Access Control, Section 164.312(a)(1))

You can secure sensitive data on laptops before the laptops go missing.

Periodic Data Encryption

Administrators

When the Periodic Data Encryption feature is active:

  • Administrators can lock files so that they cannot be accessed from the CommCell Console.

  • The software performs data protection operations (for example, backup and content indexing) on locked files and folde

End Users

End-users can lock files on their client computer through Web Console. Locked files are encrypted and can only be accessed with a user-defined passkey. If the client computer is lost or stolen, end users can remotely erase the files through Web Console.

For a comprehensive description of the Commvault the Secure Erase feature, see Data Loss Prevention - Periodic Document Encryption.

Secure Erase

Administrators can configure certain files on a laptop client be erased from the laptop when the laptop is missing or offline for a set number of days.

For a comprehensive description of the Commvault the Secure Erase feature, see Data Loss Prevention - Secure Erase.