HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...

23 votes     16 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...

9 votes     4 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...

6 votes     10 comments

Is a BAA required...

by Community Member

If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to sig...

6 votes     1 comments

New Questions

HIPAA E-Signature...

by Community Member

We are developing an iOS App that will be used by a collaborative group of agencies that provide care services to members of the community. Most a...

1 votes     0 comments

When does a Patie...

by Community Member

The topic came up in a planning session around the point in time when a PR becomes a PR. Let's say we are writing an app for first responders. If t...

1 votes     0 comments

New to Hippa

by Community Member

Can someone assist me? We are working with a client of ours who would like us to create a billing application that will be a web based system. It w...

2 votes     2 comments

Audit logging req...

by Community Member

We have implemented a secure text messaging service for our application. It is quite possible that our customers will communicate ePHI to us using...

2 votes     2 comments

Random Questions

HIPAA Program Com...

by Community Member

This was addressed on your old FAQ page for a number of years and it seems to have disappeared. Can "open format" postcards still be used to remind...

2 votes     0 comments

EHR Role-Based Co...

by Community Member

What kind of limitations on role-based access does an EHR have to provide in order to comply with the “minimum necessary” standard? For example, if...

1 votes     0 comments

Are CSPs that don...

by Community Member

I am a compliance consultant, seeing an increasing amount of concern from cloud service providers about customers/users sharing PHI via their platf...

2 votes     2 comments

Ransomeware Attack

by Community Member

I just heard that a practice in our area had a ransomware attack. Based upon their investigation their manager stated that the hacker did not get a...

-1 votes     0 comments