Windows XP Users May Have Increased Risk of HIPAA Liability

Microsoft's decision to end technical support for Windows XP effective April 8 could expose healthcare practitioners whose computers continue to use it to potential liability under HIPAA. Some computer consultants and industry commentators have claimed that simply using XP is now an "automatic HIPAA violation."

After 12 years, Microsoft has determined to no longer issue periodic security updates and patches for XP to protect users from potential infiltration by newly developed viruses and other security risks. If a computer running XP that contains patients' protected health information (PHI) is connected to the internet, that PHI could potentially be accessed through the use of malicious software that XP is unable to block. Some who are urging practitioners to immediately replace their old computers cite Microsoft's "End Of Support" notice which stated, "Businesses that are governed by regulatory obligations such as HIPAA may find that they are no longer able to