What is an example of a physical safeguard in HIPAA?

The choice of secure locations and access controls for the storage of electronic protected health information (ePHI) is an example of a physical safeguard under HIPAA. Physical safeguards are measures that protect the physical aspects of health information and the facilities and systems that house ePHI. This includes implementing policies and procedures to ensure that only authorized individuals can access areas where ePHI is stored and that the physical access to such locations is controlled and monitored.

These safeguards may involve lock systems, security personnel, surveillance cameras, and restricted access areas, all designed to prevent unauthorized physical access to sensitive information. This is crucial because, even with robust administrative and technical safeguards, if physical access to health information systems is compromised, the confidentiality and integrity of ePHI can be put at risk.

Other options, while related to data privacy and protection, do not fall under physical safeguards specifically. Employee training focuses on administrative safeguards aimed at ensuring staff is knowledgeable about handling ePHI. Encryption pertains to technical safeguards that protect data in transit and at rest. Audits of health information systems are assessments that check compliance and security, which also aligns more with administrative controls rather than physical safeguards.