As I understand it, HIPAA/HITECH does not explicitly require encryption of
media sent off-site. It requires that measures be taken to prevent loss and
states disclosure requirements should a breach occur. It does not specify
what measures are considered sufficient.

Your company's attorneys should be able to interpret the law, and someone
should determine what other companies in your industry are doing. It may be
that you don't have to encrypt at all; "Chain of Control" -- meaning bonded
couriers, secure transit and bonded storage facilities -- may be sufficient.

DISCLAIMER: I am not an attorney. My entire legal training consists of a
single (unsuccessful) attempt to fight a traffic ticket. Do not try this at
home; consult a professional.

Conrad Macina
Pfizer, Inc.


On Fri, 2 Apr 2010 19:11:58 -0400, Ryan <networker-forum AT BACKUPCENTRAL DOT 
COM>
wrote:

>I don't know about any KMS built in utility that networker owns.  I think
that KMS is built into the tape drive although i think it all depends upon
the vendor how those keys are managed.
>
>Stan, I agree with you about the other options in terms of budget and
restore ability.  I would be interested to here if anyone is using LTO4
drives with encryption and to see what the performance is.
>
>As far as money, since no one saw this coming and because the company is
far more reactive than proactive, this will be an unplanned expense
regardless of any option.  I think it would be easier to use KMS with LTO4
than using an appliance.  I don't like to add another lever of complexity
with another appliance.   Just my opinion, but I'd be willing to listen to
others and their experiences.
>
>+----------------------------------------------------------------------
>|This was sent by dryan AT medplus DOT com via Backup Central.
>|Forward SPAM to abuse AT backupcentral DOT com.
>+----------------------------------------------------------------------
>
>To sign off this list, send email to listserv AT listserv.temple DOT edu and 
>type
"signoff networker" in the body of the email. Please write to
networker-request AT listserv.temple DOT edu if you have any problems with this
list. You can access the archives at
http://listserv.temple.edu/archives/networker.html or
>via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the body of the email. Please write to 
networker-request AT listserv.temple DOT edu if you have any problems with this 
list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER