{"id":237,"date":"2019-05-09T16:05:56","date_gmt":"2019-05-09T10:35:56","guid":{"rendered":"http:\/\/blog.walkweltech.com\/?p=237"},"modified":"2019-12-30T16:07:36","modified_gmt":"2019-12-30T10:37:36","slug":"hipaa-and-blockchain","status":"publish","type":"post","link":"https:\/\/www.walkweltech.com\/blog\/hipaa-and-blockchain\/","title":{"rendered":"HIPAA and Blockchain"},"content":{"rendered":"\n

You searched it, you got it.<\/p>\n\n\n\n

Take it as a rule of thumb that any healthcare technology solution that has anything to do with Protected Health Information (PHI) in the United States of America, must comply with HIPAA (Health Insurance Portability Accountability Act (HIPAA).<\/p>\n\n\n\n

This act enforces and protects the patient\u2019s right to privacy. HIPAA aims at safeguarding the patients\u2019 sensitive health-related information, keeping it from unauthorized disclosure. It necessitates a broad set of technical safety checks to be embedded within the solution itself as well as certain administrative steps which must be included by the provider in the process.<\/p>\n\n\n\n

Blockchain<\/strong><\/h3>\n\n\n\n

Blockchain\u200b \u200bis\u200b \u200ba\u200b public (often) ledger of \u200bshared,\u200b \u200btrusted\u200b \u200btransactions. There is no single control, entries cannot be changed by anyone without consensus.<\/p>\n\n\n\n

Blockchain possesses the potential\u200b \u200bto\u200b \u200bbecome\u200b the changemaker, the disruptive technology \u200bthat will usher in\u200b \u200bthe\u200b \u200bnext\u200b \u200bgeneration Internet. This nex-gen Internet is \u200balso\u200b called\u200b\u200b \u200bto\u200b \u200bthe\u200b \u200bDecentralized\u200b \u200bWeb,\u200b \u200bor\u200b \u200bWeb3,\u200b \u200bBlockchain\u200b, evidently, serves as a is\u200b \u200ba\u200b \u200bnovel\u200b \u200band innovative solution\u200b \u200bto\u200b \u200bthe perpetual problem of\u200b \u200btrust among humans.\u200b Blockchain offers us\u200b \u200ban\u200b \u200barchitecture\u200b that\u2019s trustless, not because there is no trust involved, but because you can \u200btrust\u200b i.e,\u200b \u200bto trust\u200b \u200bthe\u200b \u200boutput\u200b \u200bof\u200b \u200bthe\u200b \u200bsystem\u200b \u200bwithout\u200b \u200bhaving to trust\u200b \u200bany\u200b \u200bactor\/doer\u200b\/block \u200bwithin\u200b \u200bit.<\/p>\n\n\n\n

\u200b\u200bWe must understand blockchain as\u200b \u200ba\u200b \u200bdistributed\u200b \u200bdatabase\u200b \u200bthat\u200b stores and keeps adding to\u200b\u200b \u200ba\u200b\u200b \u200blist\u200b \u200bof\u200b \u200btransaction\u200b \u200brecords,\u200b \u200bin an encrypted form that is resistant to tampering\u200b \u200band\u200b\/or editing.<\/p>\n\n\n\n

Blockchain for HIPAA<\/strong><\/h3>\n\n\n\n

The digital ledger technology that blockchain offers has promise, but from a privacy perspective, it matters whether the data that is stored can be considered protected health information and therefore regulated.<\/p>\n\n\n\n

Blockchain\u200b in \u200bitself\u200b is \u200ba\u200b \u200b\u200bfile\u200b\u2014 a\u200b \u200bshared\u200b \u200band\u200b often \u200bpublic\u200b \u200bledger\u200b \u200bof transactions\u200b \u200bthat\u200b \u200brecords\u200b \u200ball\u200b \u200btransactions\u200b \u200bfrom\u200b \u200bthe\u200b \u200bgenesis\u200b \u200bblock\u200b \u200b(first\u200b \u200bblock)\u200b \u200buntil\u200b \u200btoday.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

IPFS<\/strong><\/h3>\n\n\n\n

IPFS (Interplanetary File System) and the Blockchain are a perfect match! IPFS allows you to address large volumes of data, and it then places these immutable (not open to mutilation), IPFS links into a given blockchain transaction. It does two wonderful things\u2014timestamp the transactions and secure the data, while eviting the need to place the data itself onto the chain.<\/p>\n\n\n\n

However, If the information is stored unencrypted to IPFS and the generated hash value is updated to blockchain then someone with the same hash\u00a0can retrieve all the information. Therefore, the solution developer needs to ensure the privacy of the message by making it unreadable by malicious users.<\/p>\n\n\n\n

There are numerous ways available to encrypt and decrypt information. For example, a simple PGP encryption can help you as follows:<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

Once the information is encrypted and stored in IPFS a hash is generated. This hash can be used to retrieve the encrypted content. And recipient can use the private key to decrypt the encrypted message. Hence, only those can see the message content who are actually assigned to view the message.<\/p>\n\n\n\n

Blockchain can also be helpful for Section 164.308(a)(1)(ii)(D)<\/a>, \u201cImplement procedures to regularly review records of information system activity, such as audit logs, access reports, and security incident tracking reports.\u201d Blockchain offers immortal, immutable recording of information, for comprehensive and tamper proof audit-trail of who wrote and accessed every record.<\/p>\n\n\n\n

Conclusion<\/h3>\n\n\n\n

HIPAA requires the PHI to be protected and audit trail to be visible, whereas Blockchain has a reputation for being open. While these two point-of-view contradict, the limitations to blockchain in terms of data are few and if carefully developed, HIPAA is not an achievement that is impossible.<\/p>\n\n\n\n

Need help with your next big idea?<\/p>

\"\"<\/a><\/p><\/blockquote>\n\n\n