According to recent HHS OCR guidance:
“Regulated entities are not permitted to use tracking technologies in a manner that would result in impermissible disclosures of PHI [personal health information] to tracking technology vendors or any other violations of the HIPAA Rules.”
Read the full document on the HHS website.
With the potential that IP addresses and device IDs are considered PHI, platforms with access to that information for your patients or potential patients need to be covered under a BAA, or a business associates agreement.
Unfortunately, Google and other common martech vendors do not sign BAAs. So, what are healthcare marketers to do? We’ve got the answers.
We’ll cover:
Presented by:
Jane Crosby
EVP, Strategy and Business Development
True North Custom
True North is your expert healthcare marketing agency, offering full-service, HIPAA-compliant marketing solutions.
