When NextGen Healthcare Support configures the NextGen® Enterprise Rosetta Interface Messenger for you, they can configure an agent to handle file exports from the Data Share module. As part of this configuration, they specify the folder where files are exported to.
To ensure the security of exported patient Protected Health Information (PHI), you should
- Use Windows folder and file security options to ensure that the exported files folder can be accessed only by trusted personnel.
- Ensure that physical access to the server is limited to trusted personnel.
- If you copy the files to a portable media device, encrypt the device or the exported files using the Advanced Encryption Standard (AES) – 128-bit or higher. This step is needed to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA) and the Certification Commission for Healthcare Information Technology (CCHIT) requirements for security of patients’ medical information.
For more information on the security of patients’ medical information, go to NextGen Healthcare Success Community, and download the Security, Privacy and Confidentiality Summary for NextGen® Enterprise.
