HIPAA does not tell you to buy a sound masking system. But it does require that protected health information — including verbal conversations — cannot be overheard by unauthorized individuals. The responsibility for achieving that result is yours. And in the open-plan environments that characterize modern medical offices, clinics, and outpatient facilities, the architectural solution alone is frequently not sufficient.
