What does hipaa say about the security of health records in a medical institution?

hipaa does not address information security; it only addresses access to medical information.

hipaa says that every institution must have a complex security system and full-time guards.

hipaa says that every institution must have a security plan that they enforce.

hipaa outlines the exact security measures required by each type of institution.