By no means would we consider ourselves experts with regards to HIPAA, but:

To meet HIPAA guidelines, WPA/TKIP encryption and authentication should be used in conjunction with a WPA-compliant RADIUS server. We would also recommend MAC-based access control to the systems/computers in the office. This WLAN should be private for internal use and not for "guest" or customer use.

If a "guest" WLAN is desired, VLANS & multiple channel access points should be used to segregate traffic.

Also, regular (quarterly/yearly) security audits would add peace of mind and assist with any audits.

Also, you may be able to ask your EMR/EHR I.T. supplier if you are that far down the road with your record management.

If you would like to discuss further:
info@bttllc.com

Source: http://www.bttllc.com