11.0

Table Of Contents
Dragon Administrator Guide version 11
Enhancing the privacy of patient data
When a user dictates using Dragon Medical, Dragon automatically saves all audio and transcribed
text in Dragon Recorded Audio (.DRA) files. If the user corrects any of the dictated text, Dragon
automatically stores these corrections in .enwv files. Both these files are saved in the background.
These automatically created .DRA and .enwv files are used by Dragon to optimize the User Pro-
file. For example, Dragon uses these files when a user runs the Acoustic and Language Model
Optimizer.
Dragon encrypts these automatically created .DRA and .enwv files before storing them in the
local or Roaming User Profile directories to ensure they do not become a back door into patient
data and violate the patient's privacy. These files are also encrypted when a user dictates into a sup-
ported application like Microsoft Word or an Electronic Medical Record (EMR)application.
Due to the restrictions mandated by the HIPAAregulations, these encrypted .DRA and .enwv
files can only be opened by Dragon Medical for its internal use. For example, they cannot be
accessed by the non-Medical versions of Dragon, the Dragon NaturallySpeaking SDK Client Edi-
tion (DSC), or the Dragon NaturallySpeaking SDK Server Edition (DSS). In addition, any
encrypted .DRA and .enwv files automatically created by Dragon, cannot be opened in Drag-
onPad.
Notes:
n Dragon Medical does not encrypt .DRA files explicitly saved by a user. For example, if a user
saves recorded dictation when saving a document (for example, in Word, WordPerfect, or
DragonPad), these saved .DRA files are unencrypted. The user who created these files has the
responsibility of saving these files in a secure location.
n Nuance does not guarantee that the file encryption provided in Dragon will ensure total HIPAA
compliance. Other security measures are required for full compliance.
Security Considerations
As long as other adequate security protections are in place to protect patient data, you can avoid
saving excess patient data by choosing to:
1. Turn off encryption of patient data (not recommended)
2. Turn off creation of .DRA files and set options to conserve disk space, resulting in fewer saved
files
3. Turn off creation of unencrypted .nwv files
Turning on/off encryption of patient data
It is possible to turn off the encryption of these background speech recognition files by un-check-
ing the Encrypt Patient Health Information check box in the Miscellaneous tab of the Administrative
Settings Dialogue.
Nuance can not guarantee HIPAA compliance when this feature is turned off.
66