Healthcare & EHR Software

The HIPAA (Health Insurance Portability and Accountability Act) Privacy Rule does not apply to consumer curation of health data or other protections related to privacy, security, or minimizing access to PHI. Even though 23andMe receives funding from the National Institutes for Health, 23andMe currently asserts that its data-mining analysis doesn’t constitute research on human subjects under the current version of the Common Rule because it de-identifies the data. This means that 23andMe may take the position that any consent it obtains to retain, use, and share consumer data isn’t necessary for regulatory compliance, but rather is done as a courtesy.

AxisCare offers multiple features, but the only one it labels as HIPAA-compliant is its two-way chat feature. Chat allows agencies to securely send messages back and forth to caregivers.

CareCloud claims its cloud-based healthcare software is HIPAA compliant, meeting all government security standards for data transmission and storage. References to HIPAA compliance are mentioned on several of the solutions pages — including telemedicine, robotic process automation, and the Health Systems customer page. However, there is no mention of Business Associate Agreements (BAA) on the website.CareCloud claims its cloud-based healthcare software is HIPAA compliant, meeting all government security standards for data transmission and storage. References to HIPAA compliance are mentioned on several of the solutions pages — including telemedicine, robotic process automation, and the Health Systems customer page. However, there is no mention of Business Associate Agreements (BAA) on the website.

On its pricing page, ClinicSense claims it is HIPAA compliant and displays a HIPAA compliant logo. There is no mention of Business Associate Agreements (BAA) on the ClinicSense website.

There is no mention of HIPAA compliance or Business Associate Agreements (BAA) on the EHR Your Way website.

According to the folio3 Digital Health website, Epic offers features that enable HIPAA compliance, including encryption, limited apps, audit trails, Transport Layer Security (TLS), and Secure Sockets Layer (SSL). 360Connect also details EPIC’s HIPAA compliance features.