When HIPAA applies to mobile applications
The Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Breach Notification Rules can be a daunting challenge. Sometimes, the biggest question facing mobile application developers is not how to comply with (or make sure users are complying with) HIPAA, but rather whether HIPAA even applies. To understand whether software falls under the HIPAA rules, a developer must answer two questions: (1) Who will be using the application, and (2) What information will be on the application?
The HIPAA Rules only apply to HIPAA “covered entities” and their “business associates.” They do not apply to health care consumers or to other types of entities. Covered entities include health plans (including employer-sponsored group health plans), entities known as health care clearinghouses (which convert health care claims and other administrative transactions into or from a standard format), and health care providers — but only if the health providers electronically conduct certain transactions, such as submitting claims to health plans electronically. A business associate is an entity that handles “protected health information” on a covered entity’s behalf, such as a health information exchange organization sharing health information on behalf of a health care provider, or a pharmacy benefit manager operating a health plan’s prescription benefit.
Additionally, the HIPAA rules only apply to “protected health information,” information that identifies an individual and that relates to an individual’s physical or mental health, health care services to the individual, or payment for such health care services. There are exceptions for employment records and records of educational institutions. The fact that an individual has received services from a covered entity is itself protected health information. Accordingly, the name or address of an individual, although publicly available, is protected health information when residing on a covered entity’s computer if the presence of the information suggests that the individual is or was a patient or enrollee of the covered entity. Protected health information also includes otherwise anonymous information that includes a date of service (anything more detailed than a year). Accordingly, an e-mail referring to “the patient who was in last week” is protected health information, because it includes a date of service that can be used to identify the patient.
Protected Health Information - News

A business associate is an entity that handles “protected health information” on a covered entity's behalf, such as a health information exchange organization sharing health information on behalf of a health care provider, or a pharmacy benefit manager
As Jon Hyman, a partner in the Labor & Employment Group at Ohio legal firm Kohrman Jackson & Krantz, notes, finding out someone is involved with a cancer-related cause also means you might discover health information you shouldn't access as a hiring
The amendment would allow patients to receive a report indicating when organizations and individuals have accessed their medical records, or Protected Health Information (PHI). Currently, healthcare organizations are required to track access to
June 1, 2011 — The US Department of Health and Human Services (HHS) is proposing a new privacy rule that would give patients the right to receive a detailed report on who has electronically accessed their protected health information.
As Jon Hyman, a partner in the Labor & Employment Group at legal firm Kohrman Jackson & Krantz, notes, finding out someone is involved with a cancer-related cause also means you might discover health information you shouldn't access as a hiring
When HIPAA applies to mobile applications | mobihealthnews
The Health Insurance Portability and Accountability Act (HIPAA) Privacy, Security, and Breach Notification Rules can be a daunting challenge. Sometimes, the biggest question facing mobile application developers is not how to comply with (or make sure users are complying with) HIPAA, but rather whether HIPAA even applies. To understand whether software falls under the HIPAA rules, a developer must answer two questions: (1) Who will be using the application, and (2) What information will be on the application?
The HIPAA Rules only apply to HIPAA “covered entities” and their “business associates.” They do not apply to health care consumers or to other types of entities. Covered entities include health plans (including employer-sponsored group health plans), entities known as health care clearinghouses (which convert health care claims and other administrative transactions into or from a standard format), and health care providers — but only if the health providers electronically conduct certain transactions, such as submitting claims to health plans electronically. A business associate is an entity that handles “protected health information” on a covered entity’s behalf, such as a health information exchange organization sharing health information on behalf of a health care provider, or a pharmacy benefit manager operating a health plan’s prescription benefit.
Additionally, the HIPAA rules only apply to “protected health information,” information that identifies an individual and that relates to an individual’s physical or mental health, health care services to the individual, or payment for such health care services. There are exceptions for employment records and records of educational institutions. The fact that an individual has received services from a covered entity is itself protected health information. Accordingly, the name or address of an individual, although publicly available, is protected health information when residing on a covered entity’s computer if the presence of the information suggests that the individual is or was a patient or enrollee of the covered entity. Protected health information also includes otherwise anonymous information that includes a date of service (anything more detailed than a year). Accordingly, an e-mail referring to “the patient who was in last week” is protected health information, because it includes a date of service that can be used to identify the patient.
HIPAA & HITECH to provide individuals with the right to know who has accessed electronic protected health information
CladeHealth Tracker allows up to 12 users to store their personal health information. Records can be password protected and fully encrypted
Webinar minutes away! Join us: "Protected Health Information in Financial Services: Privacy & Security"
Still time to sign up 1:30EST webinar TODAY: "Protected Health Information in Financial Services: Privacy & Security"
reviewing Protected Health Information. identifying a patient by age, sex, or type of illness is not considered a breach of privacy.Protected Health Information - Bookshelf
Protected health information, your privacy
Essentials of health information management, principles and practices
RELEASE OF PROTECTED HEALTH INFORMATION Individuals who work in health care settings have the responsibility for maintaining confidentiality of protected ...The portable lawyer for mental health professionals, an A-Z guide to protecting your clients, your practice, and yourself
44 Notice of Privacy Practices for Protected Health Information (45 CFR 164.520) The HIPAA Privacy Rule gives individuals a fundamental new right to be in- ...Essentials of managed health care
The provisions of this Addendum shall terminate when all of the Protected Health Information provided by Covered Entity to Business Associate, or created or ...Privacy in the Workplace
"Protected health information," which is the crucial term in determining the obligations of covered entity, is defined as individually identifiable health ...Web Information Directory
Protected health information - Wikipedia, the free encyclopedia
Protected health information (PHI), under the US Health Insurance Portability and Accountability Act (HIPAA), is any information about health status, ...
Summary of the HIPAA Privacy Rule
The Privacy Rule calls this information "protected health information (PHI)."12 " ... A covered entity must disclose protected health information in only two situations: (a) ...
protected health information (HIPAA) - Privacy / Data ...
protected health information (HIPAA) HIPAA regulations define health information as "any information, whether oral or recorded in any form or medium" that " ...
HIPAA.com - HIPAA Protected Health Information': What Does ...
To get to protected health information, you have to examine two ... Protected health information is defined in 45 CFR 160.103, where CFR' means Code of ...
Protected Health Information
Protected health information (PHI) – Individually identifiable health ... Health Information. Health information, including. demographic information. Relates to an ...