HIPAA Security Implementation, Version 1.0

13.9 SPECIAL CONSIDERATION FOR SMALL OFFICES

The authors of the Security Rule give special attention is given to small and rural offices, as it is recognized that they are often not capable of providing the protection on the same scale with large healthcare entities. To reduce the implementation and maintenance burden , small and rural offices:

• have compliance deadline extended by 1 year

• are allowed more freedom in implementing their security policies