Zoom Rooms is a video conferencing solution that facilitates collaborative meetings in physical spaces. Tailored for various room sizes, it offers features like multiple cameras, touchscreen displays, and seamless integration with Zoom software.
Is Zoom Rooms HIPAA compliant? Yes, based on our research, Zoom Rooms can be HIPAA compliant.
Yes, Zoom Healthcare includes Zoom Rooms and will sign a business associate agreement, which can be reviewed on their support page.
The Zoom BAA addresses the handling of protected health information (PHI) during the provision of services. It outlines specific measures for the protection, access, and disclosure of PHI, ensuring compliance with HIPAA regulations.
The BAA stipulates that Zoom Rooms acknowledges its potential access to PHI and commits to safeguarding it appropriately. It defines the permissible uses of PHI within the platform, emphasizing its exclusive use for collaborative meetings and communication purposes, rather than for any aspect of patient treatment.
Additionally, the BAA outlines Zoom Rooms' responsibilities regarding security incidents, access requests from the Department of Health and Human Services (HHS), individual rights of access requests, accounting requests, and the return of PHI.
Zoom limits the type of PHI that can be used on their platform to exclude medical records and medical images. Furthermore, Zoom Rooms users may not use their platform for any part of patient treatment.
Zoom Rooms signs a BAA and can therefore be HIPAA compliant.
Learn more: HIPAA Compliant Email: The Definitive Guide
A business associate agreement (BAA) is a legally binding contract establishing a relationship between a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and its business associates. The purpose of this agreement is to ensure the proper protection of personal health information (PHI) as required by HIPAA regulations.
The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting the privacy and security of certain health information, known as protected health information (PHI).
HIPAA is designed to protect the privacy and security of individuals’ health information and to ensure that healthcare providers and insurers can securely exchange electronic health information. Violations of HIPAA can result in significant fines and penalties for covered entities.
HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities that perform certain functions or activities on behalf of the covered entity.