Does spyware and adware qualify as 'malicious software' under the HIPAA rules?

Step 2 of 2:

You forgot to provide an Email Address.

This email address doesn’t appear to be valid.

This email address is already registered. Please login.

You have exceeded the maximum character limit.

Please provide a Corporate E-mail Address.
- I agree to TechTarget’s Terms of Use, Privacy Policy, and the transfer of my information to the United States for processing to provide me with relevant information as described in our Privacy Policy.
Please check the box if you want to proceed.
- I agree to my information being processed by TechTarget and its Partners to contact me via phone, email, or other means regarding information relevant to my professional interests. I may unsubscribe at any time.
Please check the box if you want to proceed.

The security rules of HIPAA mention "malicious software" and the need to prevent it from gaining access to information systems containing PHI. Most people I talk to on the subject think it only applies to computer viruses and are not aware of the security, privacy and stability issues involved with spyware and adware. Do you feel that spyware and adware qualify as "malicious software" under the HIPAA rules?
The HIPAA Security Rule defines malicious software is defined as "software, for example, a virus, designed to damage or disrupt a system." To answer your specific question, yes, I think spyware and adware definitely falls in this category. No one but the marketing companies and other malicious outsiders benefit from spyware and adware. In fact, many organizations are harmed, and the security and privacy of PHI and other confidential information are breached every day from this stuff. Therefore, you should address and handle this malware just like any virus, worm or Trojan horse. There are some great shareware and commercial products out there to help fill this void that typical antivirus software doesn't cover.

For more info on this topic, please visit these SearchSecurity.com resources:

Best Web Links: Health care/health services

Security Policies Tip: HIPAA -- Points to consider

Executive Security Briefing: Instilling a HIPAA mindset

This was last published in October 2003

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

Meet all of our Information Security experts

View all Information Security questions and answers

SearchCloudSecurity

Related Resources

Dig Deeper on HIPAA

Have a question for an expert?

Start the conversation

0 comments

Register

Login

Forgot your password?

Your password has been sent to:

Please create a username to comment.