HIPAA Health Information Privacy, Security and Breach Notification Rules
Popular Questions
Text messaging an...
There is currently a lack of clarity about whether patient consent to communicate via (unencrypted) SMS is adequate to protect covered entities fro...
23 votes 17 commentsPHI request throu...
I understand there is some ambiguity regarding providers communicating PHI with patients, and I'm having some trouble interpreting how it applies t...
9 votes 4 commentsIs a BAA required...
If my provider is communicating PHI and non-PHI with patients through a 3rd party SMS service, such as Twilio, would my provider be required to sig...
7 votes 1 commentsCan HIPAA address...
Developers need better guidance around patient generated health data, since HIPAA focusses on one-way data sharing from a provider/other covered en...
6 votes 10 commentsNew Questions
Facility Directories
Can someone elaborate on what is allowed for facility directories under 164.510? The regulations say the directory can give the recipient the loca...
2 votes 2 commentsDevelopers have f...
We are a small company but have our software in over 100 large hospitals. Our developers have full read-write access to all data in the production...
1 votes 1 commentsHomegrown database
Looking to create a database for managing patient information - not accessible to patients or non-clinical staff. The data will be MD5 encrypted e...
1 votes 0 commentsCould a covered e...
If a health care provider who is a covered entity were to create a general fitness/wellness app and silo off any collected data from their covered ...
2 votes 0 commentsRandom Questions
Sale of Data Coll...
We are not a covered entity or business associate. We are developing a direct-to-consumer app that tracks medication adherence. We want to de-ide...
3 votes 2 commentsCould a covered e...
If a health care provider who is a covered entity were to create a general fitness/wellness app and silo off any collected data from their covered ...
2 votes 0 commentsNotifications
A NYS licensed facility providing addiction treatment services has been advised that when a patient has been referred for treatment by another enti...
2 votes 0 commentsAre we HIPAA comp...
We are a small startup team that is distributed nationwide. To date everyone has used their own personal computers to login into work email, etc. I...
1 votes 1 comments