You may have heard that Microsoft announced it will stop supporting Windows XP on April 8, but it’s possible that the news didn’t particularly resonate with you since your XP system is running quite well. However, the news could have significant reverberations from a HIPAA standpoint.
As you’re probably aware, your computer system (whether it’s XP, Vista, or another operating system) periodically updates its security protocols to ensure that hackers cannot access your private files. But if Microsoft stops issuing security updates for XP, that means your system is vulnerable to breaches, which are the nemesis of HIPAA.
According to the Health Insurance Reform Security Standards Final Rule, you "are required to maintain reasonable and appropriate administrative, physical, and technical safeguards to ensure the integrity and confidentiality of the information and to protect against any reasonably anticipated threats or hazards to the security or integrity of the information and unauthorized use or disclosure of the information."
To be able to prove that you have taken such safeguards, you need to demonstrate that you protected all the information in your computer system, which could be difficult when you’re using an un-supported operating system.
Takeaway: If your protected health information is on a Windows XP system, start changing it over now so you’re compliant by April 8.