Current through Register Vol. XLI, No. 50, December 13, 2024
Section 114A-2-3 - Data Collection Privacy and Security Requirements3.1. Data submitters shall transmit all data to the APCD or its designee over the APCD's secure electronic communications network.3.2. Transmission of the data from each data submitter to the APCD shall be in a secure manner that prevents unauthorized access and ensures authenticity, confidentiality, and integrity. This data transmission shall be secured to the level required by the HIPAA Security and Privacy Rules, 45 CFR § 164.102et seq. and shall be encrypted per NIST Special Publication 800-52, Guidelines for the Selection and use of Transport Layer Security Implementations, June 2005, NIST Special Publication 800-77, Guide to IPsec VPNs, December 2005, or NIST Special Publication 800-113, Guide to SSL VPNs, July 2008, or others which are Federal Information Processing Standards 140-2, May 2001, validated, all as amended or superseded.W. Va. Code R. § 114A-2-3