HIPAA Health Information Privacy, Security and Breach Notification Rules

About HIPAA
Health App Use Scenarios & HIPAA
Guidance on HIPAA & Cloud Computing
Engage with OCR on issues & concerns related to protecting health information privacy in mHealth design and development
Submit & View Questions
About

Popular Questions

Text messaging an...

by Community Member

There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...

20 votes     15 comments

PHI request throu...

by Community Member

I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...

9 votes     4 comments

Can HIPAA address...

by Community Member

Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...

6 votes     8 comments

Help with busines...

by Community Member

There is a lack of transparency around the content of Business Associate Agreements (BAAs), a lack of sample BAA language around the topics develop...

5 votes     3 comments

New Questions

Health Informatio...

by Community Member

We're a non profit organisation seeking to deploy an open-source health management application for use. We classify as a Business Associate as we p...

1 votes     0 comments

HIPAA compliance ...

by Community Member

I'm working on an app for a therapist to send a list of exercises to their patient's mobile device from their desktop for the patient to perform at...

1 votes     0 comments

Record, transfer ...

by Community Member

Hi, For a mobile chatbot health app that reads, transfers and stores (within and outside mobile phone in a cloud based server) sensor generated tim...

1 votes     0 comments

On Premise Interf...

by Community Member

I work for a software manufacturer that produces software that interfaces our customers various clinical systems to their EHR's and other applicati...

1 votes     0 comments

Random Questions

Nonprofit Emergen...

by Community Member

Is a nonprofit EMS company (501c3) required to have a notice of privacy practices if it is an emergency response group? What aspects of HIPAA are a...

0 votes     0 comments

J. Mark Tuthill, ...

by Community Member

We have a question regarding a vendor that claims that they don't need a BAA as they are a "conduit" and are exception. Is there someone at the OCR...

2 votes     1 comments

Providers feed PH...

by Community Member

You have an app to manage chronic care that is primarily driven by the patient and requires patient persmission to share any data, but where provid...

2 votes     0 comments

Cellular Voice HI...

by Community Member

I'm wondering if Verizon Home Phone connect with a analog phone hooked up to is violates HIPAA in any way. I'm more concerned about cellular techn...

1 votes     0 comments