Industry guide

Managed IT diligence for home health & hospice.

Agencies hold patient records accessed from the field on phones, tablets, and laptops that leave the building every day. The entire workforce is mobile, so lost and stolen devices are the breach scenario, and device encryption, remote wipe, and access control are the safeguards that decide whether a lost tablet is an incident or a catastrophe.

What binds you

The frameworks

HIPAA Security RuleThe frameworkSafeguards with particular weight on device and transmission security for a mobile workforce.
HIPAA Business Associate AgreementThe frameworkCovering the vendor managing those field devices.

The industry question

Is every field device encrypted and remotely wipeable, and is that verifiable in a report?

It belongs on the checklist, in writing, next to the other 18.

Your state

Home Health & Hospice, state by state

The same diligence with your state's verification layer: the breach statute, the entity search, the regulator.

Educational reference, not legal advice. Frameworks are summarized at the framework level; confirm specifics for your situation with counsel or the primary source.