Greetings,
Securing PHI whether physical or electronic is not the responsibility of the hardware manufacturer. It is the responsibility of the individual or entity. You can find information online which can help you better understand your responsibility as a BAA, or as part of a covered entity. A covered entity should have a compliance officer who can answer these types of questions.
Please note: This is not legal advice, but I did work in healthcare for 11 years.
~Rick
Bay Area - CA
~R5 C (1.0.3.1) ~RF Trinity, ~RF 100~400, ~RF 100~500, +RF 1.4x TC, +Canon Control Ring, BG-R10
~6D2 (v1.1.1) Retired
~EF Trinity, others ~DxO PhotoLab Elite ~Windows10/11 Pro ~EVGA RTX 3080Ti FTW3 Ultra ~ImageClass MF644Cdw ~Pixel6
~CarePaks Are Worth It
