{"id":295,"date":"2010-07-19T17:21:34","date_gmt":"2010-07-20T00:21:34","guid":{"rendered":"http:\/\/healthit.hhs.gov\/blog\/onc\/?p=295"},"modified":"2026-01-06T05:42:40","modified_gmt":"2026-01-06T05:42:40","slug":"ehr-security-is-a-top-priority","status":"publish","type":"post","link":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/","title":{"rendered":"EHR Security is a Top Priority"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">With the passage of the HITECH Act, Congress made health IT security a top priority. ONC is committed to making electronic health information as secure as technically and humanly feasible.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That\u2019s why ONC on April 1, 2010, launched an 18-month, multi-million dollar effort to improve the state of security and cybersecurity across the health IT spectrum. Key initiatives include:<\/p>\n\n\n\n<ul style=\"padding-left:var(--wp--preset--spacing--40)\" class=\"wp-block-list\">\n<li>Increasing health IT security by systematically assessing risk and providing tools and guidance to minimize it, including product configuration manuals and checklists to help assure secure health IT installations;<\/li>\n\n\n\n<li>Educating the health IT community about security awareness with training, video, literature, and other materials;<\/li>\n\n\n\n<li>Equipping the health IT workforce with the knowledge they need to manage health IT securely; and<\/li>\n\n\n\n<li>Creating support functions such as back-up, recovery, and incident response plans to help when security emergencies strike.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Our ultimate goal is to protect patient information and create confidence in health IT\u2019s security. These initiatives, and others, will help us do just that.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ONC recognizes that breaches are a serious issue. Despite stronger laws regarding breach notification, we must be vigilant and ensure they are reported. What may be surprising are the statistics. For example, we know that in the past 5 years, 80 percent of reported lost records were the result of hard drives, laptops, and other storage devices that disappeared. Interestingly, less than 10 percent of health care information breaches resulted from hacking or Internet crime.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So what does this mean in terms of security? It shows that simply preventing the theft or loss of data storage devices would have a huge impact on the security of our electronic health records. Fortunately, this doesn\u2019t require a major investment in equipment or training. Instead, it requires some clear, common sense policies, such as:<\/p>\n\n\n\n<ul style=\"padding-left:var(--wp--preset--spacing--40)\" class=\"wp-block-list\">\n<li>Securing all computers that contain patient data;<\/li>\n\n\n\n<li>Protecting laptops with a combination of physical, technology, and policy-related methods;<\/li>\n\n\n\n<li>Locking drive bays to prevent hard drives from being removed;<\/li>\n\n\n\n<li>Placing servers in secure areas, strictly limiting access, and maintaining entry\/exit logs; and<\/li>\n\n\n\n<li>Establishing security policies that require the use of a high-grade encryption algorithm.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">As we roll out these ONC initiatives, I hope some of the readers of this blog will share their own best practices: What security measures have you taken or observed? How do you ensure the security of EHRs in your daily work? Share with us what has worked for you \u2013 and what has not. We can all learn from experience.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Watch the ONC website for updates on our available security materials and to see our progress.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>With the passage of the HITECH Act, Congress made health IT security a top priority. [&hellip;]<\/p>\n","protected":false},"author":619,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_selected_menu":"","_show_breadcrumbs":"true","_blog_show_featured_image":false,"footnotes":""},"categories":[45],"archived-category":[],"featured":[],"topics":[438,425,436,437,435],"class_list":["post-295","post","type-post","status-publish","format-standard","hentry","category-privacy-and-security","topics-hipaa-compliance","topics-hit-policy","topics-privacy","topics-security","topics-security-privacy"],"acf":{"blog_authors":[{"blog_author_profiles":"198447"}],"hp_news_hide":false},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.5 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>EHR Security is a Top Priority - ONC Blog<\/title>\n<meta name=\"description\" content=\"EHR security is a top priority for ONC. Dr. Laftky outlines the EHR security precautions that the ONC is hoping to achieve.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"EHR Security is a Top Priority\" \/>\n<meta property=\"og:description\" content=\"EHR security is a top priority for ONC. Dr. Laftky outlines the EHR security precautions that the ONC is hoping to achieve.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/\" \/>\n<meta property=\"og:site_name\" content=\"ONC Blog\" \/>\n<meta property=\"article:published_time\" content=\"2010-07-20T00:21:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-01-06T05:42:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/ONC.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"sleigh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"sleigh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/\"},\"author\":{\"name\":\"sleigh\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#\\\/schema\\\/person\\\/0719592fcc77f0e269f191216da0aae7\"},\"headline\":\"EHR Security is a Top Priority\",\"datePublished\":\"2010-07-20T00:21:34+00:00\",\"dateModified\":\"2026-01-06T05:42:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/\"},\"wordCount\":426,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#organization\"},\"articleSection\":[\"Privacy &amp; Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/\",\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/\",\"name\":\"EHR Security is a Top Priority - ONC Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#website\"},\"datePublished\":\"2010-07-20T00:21:34+00:00\",\"dateModified\":\"2026-01-06T05:42:40+00:00\",\"description\":\"EHR security is a top priority for ONC. Dr. Laftky outlines the EHR security precautions that the ONC is hoping to achieve.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"EHR Security is a Top Priority\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/\",\"name\":\"ONC - Office of the National Coordinator for Health IT\",\"description\":\"Better health enabled by data\",\"publisher\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#organization\"},\"alternateName\":\"ONC\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#organization\",\"name\":\"ONC - Office of the National Coordinator for Health IT\",\"alternateName\":\"ONC\",\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/4\\\/2025\\\/08\\\/Logo-ONC-Transparent.png\",\"contentUrl\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/wp-content\\\/uploads\\\/sites\\\/4\\\/2025\\\/08\\\/Logo-ONC-Transparent.png\",\"width\":800,\"height\":176,\"caption\":\"ONC - Office of the National Coordinator for Health IT\"},\"image\":{\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/#\\\/schema\\\/person\\\/0719592fcc77f0e269f191216da0aae7\",\"name\":\"sleigh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g\",\"caption\":\"sleigh\"},\"url\":\"https:\\\/\\\/healthit.gov\\\/blog\\\/author\\\/sleigh\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"EHR Security is a Top Priority - ONC Blog","description":"EHR security is a top priority for ONC. Dr. Laftky outlines the EHR security precautions that the ONC is hoping to achieve.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/","og_locale":"en_US","og_type":"article","og_title":"EHR Security is a Top Priority","og_description":"EHR security is a top priority for ONC. Dr. Laftky outlines the EHR security precautions that the ONC is hoping to achieve.","og_url":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/","og_site_name":"ONC Blog","article_published_time":"2010-07-20T00:21:34+00:00","article_modified_time":"2026-01-06T05:42:40+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/ONC.jpg","type":"image\/jpeg"}],"author":"sleigh","twitter_card":"summary_large_image","twitter_misc":{"Written by":"sleigh","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/#article","isPartOf":{"@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/"},"author":{"name":"sleigh","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/person\/0719592fcc77f0e269f191216da0aae7"},"headline":"EHR Security is a Top Priority","datePublished":"2010-07-20T00:21:34+00:00","dateModified":"2026-01-06T05:42:40+00:00","mainEntityOfPage":{"@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/"},"wordCount":426,"commentCount":2,"publisher":{"@id":"https:\/\/healthit.gov\/blog\/#organization"},"articleSection":["Privacy &amp; Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/","url":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/","name":"EHR Security is a Top Priority - ONC Blog","isPartOf":{"@id":"https:\/\/healthit.gov\/blog\/#website"},"datePublished":"2010-07-20T00:21:34+00:00","dateModified":"2026-01-06T05:42:40+00:00","description":"EHR security is a top priority for ONC. Dr. Laftky outlines the EHR security precautions that the ONC is hoping to achieve.","breadcrumb":{"@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/healthit.gov\/blog\/"},{"@type":"ListItem","position":2,"name":"EHR Security is a Top Priority"}]},{"@type":"WebSite","@id":"https:\/\/healthit.gov\/blog\/#website","url":"https:\/\/healthit.gov\/blog\/","name":"ONC - Office of the National Coordinator for Health IT","description":"Better health enabled by data","publisher":{"@id":"https:\/\/healthit.gov\/blog\/#organization"},"alternateName":"ONC","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/healthit.gov\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/healthit.gov\/blog\/#organization","name":"ONC - Office of the National Coordinator for Health IT","alternateName":"ONC","url":"https:\/\/healthit.gov\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/Logo-ONC-Transparent.png","contentUrl":"https:\/\/healthit.gov\/blog\/wp-content\/uploads\/sites\/4\/2025\/08\/Logo-ONC-Transparent.png","width":800,"height":176,"caption":"ONC - Office of the National Coordinator for Health IT"},"image":{"@id":"https:\/\/healthit.gov\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/healthit.gov\/blog\/#\/schema\/person\/0719592fcc77f0e269f191216da0aae7","name":"sleigh","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/afb1f0138c0c71ff7a91448bb10269ef95df9b5a5cceb7a5aabd43dd26e1a978?s=96&d=mm&r=g","caption":"sleigh"},"url":"https:\/\/healthit.gov\/blog\/author\/sleigh\/"}]}},"parsely":{"version":"1.1.0","canonical_url":"https:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/","smart_links":{"inbound":0,"outbound":0},"traffic_boost_suggestions_count":0,"meta":{"@context":"https:\/\/schema.org","@type":"NewsArticle","headline":"EHR Security is a Top Priority","url":"http:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/","mainEntityOfPage":{"@type":"WebPage","@id":"http:\/\/healthit.gov\/blog\/privacy-and-security\/ehr-security-is-a-top-priority\/"},"thumbnailUrl":"","image":{"@type":"ImageObject","url":""},"articleSection":"Privacy &amp; Security","author":[{"@type":"Person","name":"sleigh"}],"creator":["sleigh"],"publisher":{"@type":"Organization","name":"ONC Blog","logo":""},"keywords":[],"dateCreated":"2010-07-20T00:21:34Z","datePublished":"2010-07-20T00:21:34Z","dateModified":"2026-01-06T05:42:40Z"},"rendered":"<script type=\"application\/ld+json\" class=\"wp-parsely-metadata\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@type\":\"NewsArticle\",\"headline\":\"EHR Security is a Top Priority\",\"url\":\"http:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/\",\"mainEntityOfPage\":{\"@type\":\"WebPage\",\"@id\":\"http:\\\/\\\/healthit.gov\\\/blog\\\/privacy-and-security\\\/ehr-security-is-a-top-priority\\\/\"},\"thumbnailUrl\":\"\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"\"},\"articleSection\":\"Privacy &amp; Security\",\"author\":[{\"@type\":\"Person\",\"name\":\"sleigh\"}],\"creator\":[\"sleigh\"],\"publisher\":{\"@type\":\"Organization\",\"name\":\"ONC Blog\",\"logo\":\"\"},\"keywords\":[],\"dateCreated\":\"2010-07-20T00:21:34Z\",\"datePublished\":\"2010-07-20T00:21:34Z\",\"dateModified\":\"2026-01-06T05:42:40Z\"}<\/script>","tracker_url":"https:\/\/cdn.parsely.com\/keys\/healthit.gov\/p.js"},"_links":{"self":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts\/295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/users\/619"}],"replies":[{"embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/comments?post=295"}],"version-history":[{"count":5,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts\/295\/revisions"}],"predecessor-version":[{"id":175875,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/posts\/295\/revisions\/175875"}],"wp:attachment":[{"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/media?parent=295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/categories?post=295"},{"taxonomy":"archived-category","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/archived-category?post=295"},{"taxonomy":"featured","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/featured?post=295"},{"taxonomy":"topics","embeddable":true,"href":"https:\/\/healthit.gov\/blog\/wp-json\/wp\/v2\/topics?post=295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}