3 ms·

HIPPA isn’t only about insurance. If they collect any personal health information (which, by the very nature of their product, I’m sure they do) they need to be

• marcinzm 7y ago
  No, they don't. Although it's not about insurance either. Here is a list of who is covered: https://www.hhs.gov/hipaa/for-professionals/covered-entities/index.html https://www.hhs.gov/hipaa/for-professionals/covered-entities... Note that a random app that gets "medical data" is not covered unless it counts as a health care provider AND transmits data in certain HHS electronic formats.
• SkyPuncher 7y ago
  That's not true. They only need to be HIPAA compliant if they're a covered entity and dealing with an HHS related transaction. https://www.hhs.gov/hipaa/for-professionals/covered-entities/index.html https://www.hhs.gov/hipaa/for-professionals/covered-entities... > A Health Care Provider .... ...but only if they transmit any information in an electronic form in connection with a transaction for which HHS has adopted a standard.