Lately we've been discussing in the office whether certain cloud-based solutions are HIPAA compliant or not. GoToMeeting by LogMeIn is an online meeting, desktop sharing, and video conferencing software solution. We know the HIPAA industry is vast so we can empathize with just how many people need to use cloud-based services in this sector.
In previous posts, we’ve covered the following cloud solutions and their capabilities for HIPAA compliance:
- Amazon CloudFront
- Apple iCloud
- Citrix ShareFile
- Google Drive
- Google Forms
- Google Hangouts
- Microsoft 365
The purpose of this post is to determine if GoToMeeting offers HIPAA compliance or not.
SEE ALSO: HIPAA Breaches and Cloud Providers
GoToMeeting is a web-hosted service created and marketed by LogMeIn. It is an online meeting, desktop sharing, and video conferencing software that enables the user to meet with other computer users, customers, clients or colleagues via the internet in real time.
GoToMeeting and the Business Associate Agreement
We’ve previously talked about how a Business Associate Agreement (BAA) is a written contract between a Covered Entity and a Business Associate. It is required by law for HIPAA compliance to ensure security and privacy. We checked the GoToMeeting site and found a page called GoToMeeting and HIPAA Compliance. In it, GoToMeeting points out: Because of the technical and security measures employed by the service, when used properly, GoToMeeting can help covered entities fulfill their HIPAA compliance obligations. The page also states that GoToMeeting is willing to sign a Business Associate Agreement.
Does GoToMeeting Offer HIPAA Compliant Service?
The Business Associate Agreement is a key component to HIPAA compliance between a Covered Entity and a Business Associate. Since GoToMeeting offers a BAA, we conclude it is a HIPAA compliant service. Conclusion: GoToMeeting is HIPAA Compliant and adheres to regulatory compliance for healthcare providers and healthcare organizations. Make sure you sign a BAA with GoToMeeting before using it to store or transmit any PHI.