Expert guidance on HIPAA compliance, healthcare technology, and building a culture of compliance.
Guidance on HIPAA authorization forms, minimum necessary rules, de-identification standards, and patient rights under the Privacy Rule. Knowing these Privacy Rule basics is key for any practice that collects, stores, or sends protected health information.
7 min read
Intuit says QuickBooks Online is not HIPAA compliant, so there is no Business Associate Agreement path for it. Learn when billing data becomes PHI and what healthcare practices should use instead.
6 min read
Calendly does not sign Business Associate Agreements on any plan. Healthcare practices cannot use it for patient scheduling that involves protected health information.
7 min read
Meta will not sign a Business Associate Agreement (BAA) for WhatsApp. The app also lacks the audit logs, admin controls, and message-keeping controls that HIPAA calls for.
6 min read
Apple does not sign Business Associate Agreements for iCloud, making it non-compliant for PHI. This covers iCloud Drive, Mail, iMessage, FaceTime, and backups.
8 min read
Free Gmail has no path to Google's BAA. What Google itself says, what HHS says when patients already email a free inbox, and how Workspace Gmail gets set up.
6 min read
Is Dropbox HIPAA compliant? Only on paid team plans with a signed BAA. Learn which plans qualify, required settings, common mistakes, and how Dropbox compares to Google Drive.
5 min read
Is Slack HIPAA compliant? Only on a Slack Enterprise plan. Slack Pro and Business+ do not qualify. Learn the restrictions, costs, and better alternatives for healthcare practices.
5 min read
Is Microsoft Teams HIPAA compliant? Yes, on eligible Microsoft 365 plans with automatic BAA coverage. Learn which plans qualify, required settings, and common mistakes.
6 min read
Is Google Drive HIPAA compliant? Only with a paid Google Workspace plan and a signed BAA. Learn key settings, common mistakes, and how to set up Drive for healthcare.
Plain-language definitions of the terms that appear throughout the blog, each tied to the regulation it comes from.
Walk through your current program with an experienced compliance consultant. Get an honest assessment and a clearer path forward.