Google Drive has stated that it is HIPAA compliant and will sign a Business Associate Agreement (BAA). It offers access control, allowing only authorized personnel to access ePHI, as well as activity logs and audit controls to register any attempts to access ePHI.
Just so you know
To securely collect medical data, files, and payments online and send them to Google Drive automatically, Jform offers HIPAA-compliant online forms and a free Google Drive integration.
Google Drive is part of G Suite, which has TLS (Transport Layer Security) encryption to protect PHI. To adhere to HIPAA-compliant procedures, Google Drive users will need to sign a BAA and disable file sharing and syncing. The BAA does not apply to third-party apps that connect with G Suite, so an additional BAA from that app provider may be required to meet HIPAA compliance standards.
Setting up a HIPAA-compliant Gmail account
Simply purchasing G Suite doesn’t make your email HIPAA compliant. To use Gmail, even with G Suite, you must configure your account correctly.
Setting up a HIPAA-compliant Gmail account
Simply purchasing G Suite doesn’t make your email HIPAA compliant. To use Gmail, even with G Suite, you must configure your account correctly.
