The meaningful use rule spells out requirements fo rhow hospitals and physicians must use electronic health records to qualify for a second round of incentives, beginning in 2014. Participants were required to conduct a risk assessment in Stage 1 and now Stage 2 requires that the EHR technology be designed to encrypt, by default, the electronic health informaton stored locally on end-user devices.
http://www.govinfosecurity.com/hitech-stage-2-rules-unveiled-a-5060
