With the changes to the HIPAA Privacy and Security Rules, the responsibilities and relationships between covered entities and their vendors have moved to the forefront of information security management. Particularly, renewed emphasis has been placed on vendor security management and the responsibility that covered entities bear on performing appropriate due diligence. In this exclusive for The Privacy Advisor, David Holtzman, CIPP/G, and Erin McMillan drill down on how to comply with the changes. Editor’s Note: Holtzman will speak at next week’s IAPP Global Privacy Summit.
Full Story