One of the least understood and most ignored requirements in HIPAA is called “Workforce Clearance” (WC). This “addressable” requirement is part of the Security Rule’s Administrative Safeguards, and appears at 164.308(a)(3).

It seems like every new cellphone model these days comes with a camera. And many, like the Apple iPhone, also contain audio recorders. In fact, it’s getting hard to find digital devices that don’t record images, video, or audio. But for Covered Entities (CEs) and Business Associates (BAs) trying to protect PHI, these devices create serious privacy and security challenges.