HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...

23 votes     17 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...

9 votes     4 comments

Is a BAA required...

by Community Member

If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to sig...

7 votes     1 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...

6 votes     10 comments

New Questions

Facility Directories

by Community Member

Can someone elaborate on what is allowed for facility directories under 164.510? The regulations say the directory can give the recipient the loca...

1 votes     2 comments

Developers have f...

by Community Member

We are a small company but have our software in over 100 large hospitals. Our developers have full read-write access to all data in the production...

1 votes     1 comments

Homegrown database

by Community Member

Looking to create a database for managing patient information - not accessible to patients or non-clinical staff. The data will be MD5 encrypted e...

2 votes     0 comments

Could a covered e...

by Community Member

If a health care provider who is a covered entity were to create a general fitness/wellness app and silo off any collected data from their covered ...

2 votes     0 comments

Random Questions

App Customization

by Community Member

A consumer focused app receives a request from one of its users, a hospital, for a customization of the product. The customization is created in re...

2 votes     1 comments

Data Recording

by Community Member

I am a student creating an app for school project. I was wondering if I have to be HIPAA compliant. I am creating an app, where diabetics can store...

3 votes     0 comments

web based CASE Ma...

by Community Member

I have a web application that allows a patient and a doctor to create an account. the patient can upload his medical history and associate scanned ...

4 votes     2 comments

Implementations w...

by Community Member

When implementing external services with clients (such as exposing an API to external clients), are there any HIPAA rules/regulations around testin...

0 votes     0 comments