Glossary · Security & identity
Encryption at rest
Encryption of stored data
Encryption at rest protects health data stored on disks, databases, backups and devices, so that a lost laptop or copied database cannot be read without the keys.
Under HIPAA, data encrypted in line with HHS guidance (NIST SP 800-111 for stored data) is not unsecured PHI for breach notification, and key management matters as much as the algorithm.
Official source
HHS Guidance to Render Unsecured PHI Unusable, Unreadable, or Indecipherable
See also
Explained in depth
Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →