Hipaa has very strict privacy laws, so it's better to go for encryption. However if you have any doubts regarding compliance with 5010 Hipaa standards then you can consult with...

HIPAA doesn't require password, but there are many business products which provides Health care solution. Edifecs Hippa 5010 migration provide you with a Edifecs health care business solutions.