1. The 2-minute Guide: Electronic Medical
Record (EMR) Backup Storage and
Recovery
Summer
2013
Monday, June 3, 13

2. To comply with HIPAA regulations, daily EMR
backup at an off-site location and recovery
plan in case of disaster is required.
Monday, June 3, 13

3. HIPAA Compliance
Onsite Storage
Web-based EMR Software
1
2
3
Monday, June 3, 13

4. Three key requirements for HIPAA compliant data backup
HIPAA Requirements for EMR Data Backup
1. Technical Requirements
- 128-bit encryption and proper disposal of data system
- Data must be stored for 6 years and all of it must be restorable at any
point
2. Physical Requirements
- Areas of secure access and physical locks that protect EMRs
3. Administrative Requirements
- Security management process, managing information access, training for
security awareness, and emergency planning
Monday, June 3, 13

5. Onsite Storage
System ‣Tape drives, DVDs or CDs, external hard drives, and
thumb drives
Downsides ‣Tape media is expensive and backup is time
consuming
‣Records must be moved to another location
‣Many of these drives cannot store the volume of
data that must be recorded
‣During transportation, the data is only as secure as
the car in which the data is traveling
‣Maintain trained and dedicated staff
Monday, June 3, 13

6. Web-based EMR Software
System ‣Software as a Service (SaaS) is an automated online
backup
Cons
‣Eliminates human involvement in the workflow and
the need to physically transport backup
‣Subsequent back up time is only minutes per day
Pros
‣Initial backup that takes several hours
‣HIPAA regulations demand high encryption
requirements
Monday, June 3, 13

7. Onsite and Web-based EMR Backup
Combination Method
‣To ensure HIPAA compliance when shopping for
backup software company
• Provider must sign a Business Associate Agreement
pertaining to HIPAA regulations
• Provider must be able to provide a detailed disaster
recovery plan that ensures speedy recovery after a
disaster
Monday, June 3, 13

8. MedicalRecords.com works to connect physicians to the best EMR companies, matching the right
EMR system with specific medical practices. MedicalRecords.com is the world’s largest directory of
EMR software vendors. It is a privately held company based in Cambridge, MA whose mission is to
better organize the EMR software market. The company was founded by seasoned technology and
healthcare professionals in 2010 after the passing of The Health Information Technology for
Economic and Clinical Health Act (HITECH Act).
For more information about EMR Backup Storage and Recovery, please visit us at: http://
www.medicalrecords.com/emr-backup-storage-and-recovery
How MedicalRecords.com can help!
About Us
Location:
55 Cambridge Parkway
Suite 103
Cambridge, MA 02142
Monday, June 3, 13

9. Thank you for reading The 2-minute Guide: EMR Backup Storage and Recovery.
Please visit us at MedicalRecords.com so we can help connect you to the best EMR
companies!
How MedicalRecords.com can help!
Choosing the Right EMR
Monday, June 3, 13