Implement Transmission Encryption

[suhasramanand]

Implement technical security measures to guard against unauthorized access to ePHI being transmitted over an electronic communications network.

Acceptance criteria

• All ePHI transmissions must use TLS 1.3 or higher
• Certificate validation required
• Perfect Forward Secrecy (PFS) required
• Disable deprecated protocols (SSL, TLS 1.0, TLS 1.1)

---

Source: § 2.4.1

Covered entities MUST implement technical security measures to guard against unauthorized access to ePHI being transmitted over an electronic communications network.