FAQs related to Security

VITL, the organization that operates the Vermont Health Information Exchange, uses several strategies to ensure data in the Information Exchange is secure, including adherence to national security protocols like the NIST Cyber Security Framework. Additionally, all information in the Health Information Exchange is compliant with HIPPA privacy protections.

• All information sent to or by the Vermont Health Information Exchange is encrypted.
• The Vermont Health Information Exchange systems are all physically located in secure datacenters.
• VITL monitors the use of the Information Exchange. All VITL staff and staff at partner organizations are trained to identify and report security incidents. Unusual or malicious events are reviewed and addressed.