Do the Security Standards apply to paper documents?
The most significant change from the proposed regulations is that they now extend to all individual identifiable health information in the hands of covered entities, regardless of whether the information is or has been in electronic form. This includes purely paper records and oral communications.