Citrix’s ShareFile touts itself as, “the secure file sharing and transfer service that’s built for business.” But, is Citrix ShareFile HIPAA compliant? Read below if they follow HIPAA compliant file sharing.
Why Does it Matter if Citrix ShareFile is HIPAA Compliant?
Under HIPAA, any software provider that has the potential to access protected health information (PHI) is considered a business associate. Before a healthcare organization can work with a business associate, they must assess their security practices, and have a signed business associate agreement in place.
By doing so, the healthcare organization is conducting their due diligence. When organizations fail to conduct their due diligence, they are held liable for their business associates’ lack of compliance, and may be subject to fines and corrective actions.
Is Citrix ShareFile HIPAA Compliant: Security Features
HIPAA requires security measures to be in place to ensure the confidentiality, integrity, and availability of PHI.
ShareFile offers:
- User authentication: confirms the identity of users, ensuring they are who they appear to be.
- Audit controls: tracks access to sensitive data, enabling the quick detection of unauthorized access.
- Automatic logoff procedures: logs out users after a period of inactivity.
- Encryption: prevents unauthorized access to data.
- Integrity controls: prevents unauthorized alteration of data.
- Account lockout: locks users out of their account after five failed login attempts.
Is Citrix ShareFile HIPAA Compliant: Business Associate Agreements
Even if a software provider has adequate security measures in place, if they are unwilling or unable to sign a business associate agreement, the software cannot be used in compliance with HIPAA.
Business associate agreements (BAAs) are legal documents that require each signing party to be HIPAA compliant, and be responsible for maintaining their compliance. ShareFile states that they are willing to sign a BAA with healthcare clients, however, the end user is responsible for ensuring that the software is used in compliance with HIPAA.
Is Citrix ShareFile HIPAA Compliant?
So, is Citrix ShareFile HIPAA compliant? Yes, as long as you have a signed business associate agreement before using the service, and use and configure the file sharing tool properly, Citrix’s ShareFile is HIPAA compliant.
For information on how to keep patient information protected while using ShareFile, please click here.
