is encryption required for hipaa?
The HIPAA Security Rule doesn't explicitly require encryption of data at rest, or even during transmission. ... Within the Technical Safeguards, both the Access Control Standard (i.e. data at rest) and Transmission Security Standard (i.e. data in motion) have an Implementation Specification for Encryption.