HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...

23 votes     17 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...

9 votes     4 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...

6 votes     10 comments

Is a BAA required...

by Community Member

If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to sig...

6 votes     1 comments

New Questions

virtual job board...

by Community Member

Healthcare providers place requests for interpreter services on a web portal that the state agency leases from a private vendor. Interpreters then ...

1 votes     0 comments

Authorization to ...

by Community Member

If a client or parents of the client (Under 18) are out of the country can an email give permission to the clinician to speak with another third-...

1 votes     0 comments

How granular shou...

by Community Member

As a software developer in the role of business associate I have read about what needs to be captured and stored by software that handles PHI for a...

1 votes     0 comments

How to handle old...

by Community Member

I'm a web designer and have a client who has recently become hipaa compliant concerning his handling of email. He needed me to search his old email...

1 votes     0 comments

Random Questions

How should develo...

by Community Member

Right now, developers expend a lot of time and resources (including the cost of data storage) on audit logging but don’t have assurance that they a...

4 votes     2 comments

Does HIPAA extend...

by Community Member

A software company (e.g. a startup) develops an untethered PHR that is offered directly to the patient (consumer). The patient then authorizes PHR ...

4 votes     2 comments

HIPAA E-Signature...

by Community Member

We are developing an iOS App that will be used by a collaborative group of agencies that provide care services to members of the community. Most a...

1 votes     0 comments

Must a mobile app...

by Community Member

A covered entity provides test results to patients through a Patient Mobile App or a Website. Patients must request access and data is transmitte...

0 votes     0 comments