HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...

20 votes     15 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...

9 votes     4 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...

6 votes     8 comments

Help with busines...

by Community Member

There is a lack of transparency around the content of Business Associate Agreements (BAAs), a lack of sample BAA language around the topics develop...

5 votes     3 comments

New Questions

Health Informatio...

by Community Member

We're a non profit organisation seeking to deploy an open-source health management application for use. We classify as a Business Associate as we p...

1 votes     0 comments

HIPAA compliance ...

by Community Member

I'm working on an app for a therapist to send a list of exercises to their patient's mobile device from their desktop for the patient to perform at...

1 votes     0 comments

Record, transfer ...

by Community Member

Hi, For a mobile chatbot health app that reads, transfers and stores (within and outside mobile phone in a cloud based server) sensor generated tim...

1 votes     0 comments

On Premise Interf...

by Community Member

I work for a software manufacturer that produces software that interfaces our customers various clinical systems to their EHR's and other applicati...

1 votes     0 comments

Random Questions

What does "on beh...

by Community Member

What triggers acting "on behalf of a covered entity", A, or B, or other? A. A covered entity uses your app (you are not paid or have signed a BA; t...

2 votes     1 comments

Risk Assessment T...

by Community Member

Small companies and Business Associates are eager to meet their security requirements under HIPAA. Many smaller B.A.s have stated that they are una...

3 votes     1 comments

EHR software part...

by Community Member

Our EHR solution is partnering with another health related software company with a cloud based API product to provide additional solutions for prov...

4 votes     1 comments

Clarify the defin...

by Community Member

I see a great deal of variation from organization to organization on what constitutes PHI in the digital realm. I have several scenarios that I'd ...

1 votes     2 comments