HIPAA Health Information Privacy, Security and Breach Notification Rules
Popular Questions
Text messaging an...
There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...
23 votes 17 commentsPHI request throu...
I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...
9 votes 4 commentsIs a BAA required...
If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to sig...
7 votes 1 commentsCan HIPAA address...
Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...
6 votes 10 commentsNew Questions
Facility Directories
Can someone elaborate on what is allowed for facility directories under 164.510? The regulations say the directory can give the recipient the loca...
2 votes 2 commentsDevelopers have f...
We are a small company but have our software in over 100 large hospitals. Our developers have full read-write access to all data in the production...
1 votes 1 commentsHomegrown database
Looking to create a database for managing patient information - not accessible to patients or non-clinical staff. The data will be MD5 encrypted e...
1 votes 0 commentsCould a covered e...
If a health care provider who is a covered entity were to create a general fitness/wellness app and silo off any collected data from their covered ...
2 votes 0 commentsRandom Questions
Sale of Data Coll...
We are not a covered entity or business associate. We are developing a direct-to-consumer app that tracks medication adherence. We want to de-ide...
3 votes 2 commentsAre Cloud Storage...
Is a company that provides encrypted cloud storage for a covered entity a BA if it does not have the encryption key and has no ability to access th...
2 votes 2 commentsEHR software part...
Our EHR solution is partnering with another health related software company with a cloud based API product to provide additional solutions for prov...
4 votes 1 commentsUnencrypted Text ...
Can a provider, or business associate acting on behalf of a provider, send an unencrypted text or email to a patient if the initial message does no...
1 votes 0 comments