HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...

23 votes     17 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...

9 votes     4 comments

Is a BAA required...

by Community Member

If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to sig...

7 votes     1 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...

6 votes     10 comments

New Questions

Facility Directories

by Community Member

Can someone elaborate on what is allowed for facility directories under 164.510? The regulations say the directory can give the recipient the loca...

2 votes     2 comments

Developers have f...

by Community Member

We are a small company but have our software in over 100 large hospitals. Our developers have full read-write access to all data in the production...

1 votes     1 comments

Homegrown database

by Community Member

Looking to create a database for managing patient information - not accessible to patients or non-clinical staff. The data will be MD5 encrypted e...

2 votes     0 comments

Could a covered e...

by Community Member

If a health care provider who is a covered entity were to create a general fitness/wellness app and silo off any collected data from their covered ...

2 votes     0 comments

Random Questions

HIPAA Requirement...

by Community Member

I am looking to find a HIPAA regulation that tells me whether or not a healthcare facility needs to have all TIA/EIA-568-B certified data cables. I...

1 votes     0 comments

Must a mobile app...

by Community Member

A covered entity provides test results to patients through a Patient Mobile App or a Website. Patients must request access and data is transmitte...

1 votes     0 comments

'Medical Info' fi...

by Community Member

We are working on a mobile app that tracks attendance for fitness instructors/martial arts schools. Instructors can create classes and save their s...

1 votes     0 comments

HIPAA and FHIR

by Community Member

The introduction of FHIR to the 2015 CEHRT has opened the door for 3rd party applications to receive patient health information directly from an EH...

1 votes     0 comments