An Assessment of HIPAA Security Preparedness: Most Health Care Organizations Remain Noncompliant

April 2004 An Assessment of HIPAA Security Preparedness: Most Health Care Organizations Remain Noncompliant Until recently, patients and their physicians stored paper medical records under lock and key in their medical offices. In today's innovative health care environment, ensuring the security of personal health information (PHI) is much more challenging. For example, PHI is regularly inserted into claims and supporting reports that are sent electronically across state lines and/or international boundaries to various stakeholders to coordinate treatment plans and pay for coverage. Although the move to more electronic data interchange (EDI) holds great promise for increasing the efficiency . . .