HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...

23 votes     17 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...

9 votes     4 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...

6 votes     10 comments

Is a BAA required...

by Community Member

If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to sig...

6 votes     1 comments

New Questions

virtual job board...

by Community Member

Healthcare providers place requests for interpreter services on a web portal that the state agency leases from a private vendor. Interpreters then ...

1 votes     0 comments

Authorization to ...

by Community Member

If a client or parents of the client (Under 18) are out of the country can an email give permission to the clinician to speak with another third-...

1 votes     0 comments

How granular shou...

by Community Member

As a software developer in the role of business associate I have read about what needs to be captured and stored by software that handles PHI for a...

1 votes     0 comments

How to handle old...

by Community Member

I'm a web designer and have a client who has recently become hipaa compliant concerning his handling of email. He needed me to search his old email...

1 votes     0 comments

Random Questions

Cloud Security

by Community Member

What are the suggested encryption protocols that one should implement in order to fulfill the 164.312(a)(2)(iv) Have you implemented a mechanism t...

5 votes     2 comments

What is BAA to do...

by Community Member

The scenario is this: A private health clinic (PHC) signs up online to use a web-based EHR application to create patient charts, schedule patients,...

1 votes     3 comments

HIPAA E-Signature...

by Community Member

We are a small organization starting up a tele-health initiative. We would like to deliver a copy of our Notice of Privacy Practices electronically...

3 votes     1 comments

HIPAA E-Signature...

by Community Member

We are developing an iOS App that will be used by a collaborative group of agencies that provide care services to members of the community. Most a...

1 votes     0 comments