HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...

20 votes     15 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...

9 votes     4 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...

6 votes     8 comments

Help with busines...

by Community Member

There is a lack of transparency around the content of Business Associate Agreements (BAAs), a lack of sample BAA language around the topics develop...

5 votes     3 comments

New Questions

Are CSPs that don...

by Community Member

I am a compliance consultant, seeing an increasing amount of concern from cloud service providers about customers/users sharing PHI via their platf...

0 votes     0 comments

HIPAA Program Com...

by Community Member

This was addressed on your old FAQ page for a number of years and it seems to have disappeared. Can "open format" postcards still be used to remind...

1 votes     0 comments

Web app records m...

by Community Member

I'm working on a free web application for use by healthcare providers that tracks the usage of antibiotics. I intend to make the application availa...

1 votes     0 comments

Website Contact F...

by Community Member

Hi, Can someone tell me if a simple contact form on a health providers website needs to be HIPAA compliant if it is only requesting information l...

1 votes     0 comments

Random Questions

Are we a covered ...

by Community Member

How can we determine if we’re a covered entity? The resources to make that determination are expensive – i.e. law firms

5 votes     4 comments

PHI Data on Offli...

by Community Member

Remote devices may not have access to the internet at all times and therefore may be operating offline. Data must be stored on the devices until c...

4 votes     1 comments

Hospital Outpatie...

by Community Member

If a patient acknowledges receipt of a Notice of Privacy Practices when admitted to a Hospital, does the Hospital-owned outpatient pharmacy using t...

3 votes     0 comments

'Medical Info' fi...

by Community Member

We are working on a mobile app that tracks attendance for fitness instructors/martial arts schools. Instructors can create classes and save their s...

1 votes     0 comments