Topic
Who may see an employee health record, and what you must be able to prove.
5 guides
HIPAA vs OSHA employee health records: most employee files fall under OSHA's 1910.1020 and the ADA, not HIPAA. See which rule applies and who can access them.
Read this · 9 min read
An employee health data security checklist for occupational-health teams: HIPAA administrative, physical, and technical safeguards, plus how to self-audit.
Read this · 8 min read
Does HIPAA require encrypting PHI at rest? A plain-English guide for employee health teams on what to encrypt, key management, and the 2025 rule change.
Read this · 8 min read
What HIPAA actually requires for audit logs: the exact rules, what an access log must capture, how long to keep it, and how logs prove compliance to OCR.
Read this · 7 min read
A CFR-cited guide to the business associate agreement occupational health programs need: the two-part test, required clauses, and the employment-records carve-out.
Read this · 7 min read