HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities ...

23 votes     17 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applie...

9 votes     4 comments

Is a BAA required...

by Community Member

If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to ...

7 votes     2 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered...

6 votes     11 comments

New Questions

Who can participa...

by Community Member

We have created an IPA [independent practice association] in which providers (covered entities) and non providers such as soup kitchens, homeles...

1 votes     0 comments

Medical Device Data

by Community Member

Scenario 1: Manufacturer makes an implantable device that collects data from the patient in order to function as intended. This data is uploaded...

3 votes     1 comments

Cloud Software to...

by Community Member

My company is developing a SaaS that will help companies to track their employees during the COVID-19 outbreak and will enable their staff to cl...

2 votes     2 comments

OCR involvement a...

by Community Member

What is the intent of this site? OCR rarely, if ever comments on questions, some of which could really help HIPAA regulated organizations and de...

4 votes     1 comments

Random Questions

HIPAA Requirement...

by Community Member

I am looking to find a HIPAA regulation that tells me whether or not a healthcare facility needs to have all TIA/EIA-568-B certified data cables...

1 votes     0 comments

OCR involvement a...

by Community Member

What is the intent of this site? OCR rarely, if ever comments on questions, some of which could really help HIPAA regulated organizations and de...

4 votes     1 comments

Teaching Hospital...

by Community Member

I work for a University medical school that employs physicians as faculty and who teach at the hospital. I would like to know more about how fa...

2 votes     1 comments

Are CSPs that don...

by Community Member

I am a compliance consultant, seeing an increasing amount of concern from cloud service providers about customers/users sharing PHI via their pl...

2 votes     2 comments