Encrypting User Devices According to HIPAA Compliance #

Steps to Encrypt User Devices in Compliance with HIPAA Regulations:

1. Enable Device Encryption through Settings → Practices.
2. Add the User’s Device to the User Devices table. This can be done using one of the following methods:
   
   Method 1: Send a Request from the Login Page.
   Method 2: Manually Add a Device by entering the Visitor ID in User Devices.

Purpose: This allows encryption of specific devices that have access to Legend, ensuring HIPAA and patient privacy compliance.

To safeguard sensitive information, only authorized devices will be permitted to log in. This prevents employees from accessing the system on unauthorized devices, such as personal phones or external computers.

1. Enable Device Encryption from Settings → Practices #

• Navigate to Settings -> Practices -> Edit
• Check the Encrypt Specific Devices checkbox
• Click on the Update button

• Go to Settings → Users
• Checkboxes against all the users are checked for the Encrypt Specific Devices

In this manner, all user devices are now required to be encrypted, and users will not be able to log in until the device they wish to use has been successfully encrypted.

To disable device encryption for a user, simply uncheck the “Encrypt Specific Devices” checkbox. This will allow the user to log in from any device.

Users are now unable to log in if encryption is enabled.

2. Add the User’s Device to the User Devices #

To encrypt their device, you can follow either Method 1 or 2 outlined below:

Method 1: Send a request from the Login Page: #

• Write a Comment
• Click on the Send for Approval button

• An email will be sent to the Support Team for approval
• The Support Team will approve the request

This will add the user’s device to the whitelist table under Settings → Users → Edit → User Devices dropdown. This means the user will only be able to log in from the device for which the encryption request has been accepted, rather than from any device, as long as encryption is enabled.

Method 2: Manually Add a Device by entering the Visitor ID in User Devices: #

• Go to Settings → Users → Edit → User Devices dropdown
• Write the Visitor ID of the requester
• Write the details in the comment
• Click on the Add button

This will add the user’s device to the whitelist table under Settings → Users → Edit → User Devices dropdown. As a result, the user will only be able to log in from the device whose Visitor ID is added to the User Devices table, rather than from any device, while encryption is enabled.