With technology always changing, it's important for employers to learn how to protect employee information.
Protecting patient and employee health information has become more complex. Technology is, and likely always will be, a fundamental part of the healthcare system. While computers make it easier for teams to manage records, any online document could fall victim to a cyberattack.
In the healthcare industry, the Health Insurance Portability and Accountability Act (HIPAA) ensures patient confidentiality. For employers, it’s unclear whether HIPAA laws apply to their employee health records or what types of medical information are considered “confidential.”
To protect the health and safety of your employees, you must abide by American privacy laws, which may or may not include HIPAA, while also following a few security-based best practices.
What is HIPAA, and Does it Apply to Non-Healthcare Employers?
HIPAA is a set of national standards for the protection of health information. These standards apply to covered entities, which include health plans, healthcare clearinghouses and healthcare providers who electronically transmit medical information (unless it’s for employer use).
Non-healthcare employers do not have to abide by HIPAA law, but most states use HIPAA as a standard for identity theft protection laws or cybersecurity laws, so you aren’t out of the woods.
For example, The Oregon Consumer Identity Theft Protection Act places standards for how employers should...
During August 2026, a series of misleading, fabricated and falsely contextualised claims circulated across social media platforms and media accounts in Bharat. The claims covered electoral rolls, ...