HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...

23 votes     16 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...

9 votes     4 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...

6 votes     10 comments

Is a BAA required...

by Community Member

If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to sig...

6 votes     1 comments

New Questions

Is a state-run MM...

by Community Member

Is a state-run medical marijuana patient registry a covered entity? The Florida registry includes identifiable patient personal information and MMJ...

1 votes     1 comments

Is my App followi...

by Community Member

I email addresses of the users of the app, which are all doctors not patients, for authentication purposes. The application uses SSL encryption f...

1 votes     0 comments

Whether App is tr...

by Community Member

I have mobile application for tracking physician compensation, and I'm not sure if it contains data points separately or together which would be co...

1 votes     0 comments

online social com...

by Community Member

We are a covered entity, and developing an online education program for a medical condition. Only registered/approved users are able to join view p...

1 votes     0 comments

Random Questions

How to ger patien...

by Community Member

Hello there, I need some API which can provide me patient information using their Insurance ID.

1 votes     0 comments

EHR Role-Based Co...

by Community Member

What kind of limitations on role-based access does an EHR have to provide in order to comply with the “minimum necessary” standard? For example, if...

1 votes     0 comments

Unencrypted PHI i...

by Community Member

From Kevin Wiggins, Saul Ewing: If a CE puts PHI on the Cloud and later terminates that Cloud as a service provider, there is inevitably some data...

1 votes     2 comments

De-identification...

by Community Member

Is there any limitation on a covered entity's de-identification of PHI or use of de-identified information? For example, may a covered entity de-id...

3 votes     2 comments