HIPPA's compliant Auditing System for Medical Imaging System

Area of Science:

• Health Informatics
• Medical Imaging Security
• Information Security Standards

Background:

• The Health Insurance Portability and Accountability Act (HIPAA) mandates specific security features for healthcare data protection.
• Current medical imaging systems generate logs, but lack standardized methods for creating HIPAA-compliant audit trails.
• Ensuring the security and privacy of Protected Health Information (PHI) is critical in medical imaging systems like PACS and RIS.

Purpose of the Study:

• To design and develop a HIPAA-compliant auditing system tailored for medical imaging systems.
• To address the challenge of integrating large volumes of log data into effective audit trails.
• To enhance the security monitoring capabilities for medical imaging data.

Main Methods:

• Outlined the design of a HIPAA-compliant auditing system for medical imaging.
• Utilized Supplement 95 of the Digital Imaging and Communications in Medicine (DICOM) standard: Audit Trail Messages.
• Developed a security monitoring system to process and integrate system activity logs.

Main Results:

• Successfully designed a system for HIPAA-compliant auditing in medical imaging.
• Demonstrated the integration of DICOM Audit Trail Messages for enhanced security monitoring.
• Facilitated the detection of non-compliant behavior and improper PHI handling.

Conclusions:

• The developed system provides a framework for HIPAA-compliant auditing in medical imaging environments.
• Leveraging DICOM standards enables effective integration of log data for security compliance.
• The system supports the assessment of policy compliance and the detection of security breaches.