Take the 2-minute tour ×
Healthcare IT Stack Exchange is a question and answer site for healthcare IT professionals and solution providers. It's 100% free, no registration required.

Here's a scenario:

  1. An intranet CPOE application
  2. User runs a report, which downloads as a PDF and opens in Acrobat on the local PC
  3. User leaves the PC without logging out or closing Acrobat
  4. CPOE times out and auto-logs the user out
  5. The PDF with sensitive data stays open. It is also stored in the browser cache/download folder

Now, is this a HIPAA issue? Is there anything a CPOE vendor can do? There are other things like clipboard, screenshots, etc., all resulting in a similar issue.


migrated to security.stackexchange.com by jonsca May 1 '12 at 11:13

This question belongs on our site for Information security professionals.

Browse other questions tagged or ask your own question.