As the percentage of computer users with high-speed Internet connections gradually increases, the dangers to those connected computers are growing as well. It's your responsibility to protect your computer, particularly if you have an always-connected highspeed link to the Internet. If you are a “covered entity” under HIPAA, you are also legally required by the new Security Rule (not to be confused with the Privacy Rule) reasonably to protect any computer which has any identifiable patient data on it (such as copies of letters or email you have written or received, billing information, and, of course, any clinical records). You must also document the steps you have taken to create such protection, including from unauthorized access and data loss. These steps must also include a reasonable backup plan and a disaster recovery plan. You need to do these things even if you use a slower dial-up connection.

In addition to the critical importance of always running a virus checking program, keeping the data files for the virus checker (a.ka. “definitions”) up-to-date on a weekly basis, and checking your computer regularly for “spyware” (described in the previous column), you must also be certain that your computer is sealed off from attempts to access it through the Internet. On a PC, this access could be gained through “open ports.” These are not physical connections, but various protocol numbers that allow connections from other computers, including those of hackers, through your single Internet cable.

To check if your computer is vulnerable to such attacks, I suggest you use the free “Shields Up” program, which can be accessed directly from the www site of Gibson Research Corporation at . If you find that your computer is vulnerable, then you must install either a hardware or software “firewall.” One well-respected free software firewall is “Zone Alarm” available at

“TechNotes” runs in each issue of TAP, with the aim of educating us about aspects of technology and communications relevant to our work.