Each electronic data intermediary system shall have security and system safeguards designed to prevent and detect unauthorized access, modification, or manipulation of prescription information in accordance with current electronic transmission standards. Each system established by an electronic data intermediary shall include procedures to:
(1) select and execute security measures;(2) establish physical safeguards to protect computer systems and other pertinent equipment from intrusion;(3) protect and control confidential patient information;(4) prevent unauthorized access to the data when transmitted over communication networks or when data physically moves from one location to another using media such as magnetic tape, removable drives, CD media or any other means of data storage; and(5) authenticate the sender's authority and credentials to transmit a prescription.Conn. Agencies Regs. § 20-614-3
Adopted effective August 30, 2005