HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered...

6 votes     11 comments

Help with busines...

by Community Member

There is a lack of transparency around the content of Business Associate Agreements (BAAs), a lack of sample BAA language around the topics deve...

5 votes     3 comments

What part of the ...

by Community Member

Does the entire environment need to be HIPAA compliant, or is it possible that the solution could fall into an exception to HIPAA, or can they u...

5 votes     2 comments

Are we a covered ...

by Community Member

How can we determine if we’re a covered entity? The resources to make that determination are expensive – i.e. law firms

5 votes     5 comments

New Questions

OCR involvement a...

by Community Member

What is the intent of this site? OCR rarely, if ever comments on questions, some of which could really help HIPAA regulated organizations and de...

1 votes     1 comments

Web Based Portal ...

by Community Member

If a DME supplier, vitamin supplier, text reminder application, auto payment system for patient accounts, or a website management company colle...

2 votes     2 comments

Research or a hea...

by Community Member

Does developing an algorithm/machine learning system that uses PHI from EMR to predict and alert providers to negative health outcomes constitut...

1 votes     0 comments

BAA and CI/CD too...

by Community Member

Many third party tools exist for Continuous Integration and Continuous Development (CI/CD). While an organization may maintain a BAA with their ...

2 votes     0 comments

Random Questions

Web app records m...

by Community Member

I'm working on a free web application for use by healthcare providers that tracks the usage of antibiotics. I intend to make the application ava...

1 votes     0 comments

Data Recording

by Community Member

I am a student creating an app for school project. I was wondering if I have to be HIPAA compliant. I am creating an app, where diabetics can st...

3 votes     0 comments

Are CSPs that don...

by Community Member

I am a compliance consultant, seeing an increasing amount of concern from cloud service providers about customers/users sharing PHI via their pl...

2 votes     2 comments

What is BAA to do...

by Community Member

The scenario is this: A private health clinic (PHC) signs up online to use a web-based EHR application to create patient charts, schedule patien...

1 votes     3 comments