The Department of Health and Human Services has issued guidance on how to protect Personal Health Information (PHI) Data in motion (e.g., network, wireless transmission) — Data at rest (e.) databases, file systems, other storage) — data in use (e., being created, retrieved, updated) — — Data disposed. Data disposed means discarded paper records or recycled electronic media must have been destroyed in one or more of the following safe harbors apply: the data is encrypted or destroyed.”]
Source: https://www.csoonline.com/article/2136620/hhs-issues-guidance-for-securing-phi.html