Is ePHI CUI ? Must a commercial company handling ePHI for a Department, be compliant witrh SP800171 ?

old.reddit.com / @/u/Gray_Cloak, https://old.reddit.com/user/Gray_Cloak

Hi. Is ePHI from patients (in- or outpatient) of the VA considered CUI - and therefore is SP800-171 implementation compliance applicable to the commercial company that is performing the medical service for the VA ? In such a case might CMMC also be applicable, or is that strictly only relevant to DoD contracts. Thanks!

submitted by /u/Gray_Cloak
[link] [comments]

published 8 months ago




See all items from the same source