• Home > Reports and Commentary

Privacy

The US Department of Health and Human Services, Office of Civil Rights has a series of reports on HIPAA topics. See their index of HIPAA guidance documents.

The Workgroup for Electronic Data Interchange, Strategic National Implementation Project has a collection of reports on HIPAA privacy and security issues. See their index of HIPAA white papers.

Security

The National Institute for Standards and Technology (NIST) Computer Security Resource Center (CSRC) has an excellent collection of reports on information systems security. See especially:

• An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule (NIST/CSRC 800-66, May 2004 draft)

one of the best guides to implementing the HIPAA Security Rule thus far

• Generally Accepted Principles and Practices for Securing Information Technology Systems (NIST/CSRC 800-14, September 1996)

• Underlying Technical Models for Information Technology Security (NIST/CSRC 800-33, December 2001)

• Information Technology Security Training Requirements (NIST/CSRC 800-16, April 1998)
  

For more, see the bibliography.