Context
Addressable does not mean optional without analysis or documentation.
Example
An organization documents its encryption assessment and any alternative measures.
References
- Security Rule overview HHS Office for Civil Rights
HIPAA Glossary
Addressable implementation specification
A Security Rule implementation specification that requires an organization to assess whether and how to implement it based on its circumstances.
Reviewed August 2026