Encryption in plain English

Encryption turns readable information into scrambled ciphertext unless you have the right key. Think of it as a tamper-evident envelope for digital files.

Where practices use it

• Laptops and desktops that store or cache PHI.
• Backups on disk or cloud.
• Internet connections (TLS) between your EHR and browsers.

Why regulators care

If a lost encrypted device meets certain standards, you may avoid treating the event as a reportable breach, your counsel still decides based on facts.

For vendors

Offer clear documentation of what is encrypted, who holds keys, and how customers rotate credentials.