--- title: Telehealth HIPAA Compliance Primer description: The Telehealth HIPAA Compliance Primer can be an important feature in telehealth security. Discover what an organization needs to consider in order to be HIPAA compliant. image: https://blog.webrtc.ventures/hubfs/Imported_Blog_Media/The-Road-to-WebRTC-13.jpg --- [Skip to content](https://blog.webrtc.ventures/2018/07/telehealth-hipaa-compliance-primer#main-content) ![WebRTC.ventures](https://blog.webrtc.ventures/hubfs/logo-main-light.svg) - [WebRTC Services](https://webrtc.ventures/webrtc-development-services/) Show submenu for WebRTC Services - [Assess](https://webrtc.ventures/services/assess/) - [Build](https://webrtc.ventures/services/build/) - [Integrate](https://webrtc.ventures/services/integrate/) - [Test](https://webrtc.ventures/services/test/) - [Manage](https://webrtc.ventures/services/manage/) - [Migrating From Twilio Video](https://webrtc.ventures/twilio-video/) - Our Partners Show submenu for Our Partners - [Amazon Chime SDK](https://webrtc.ventures/partners/amazon-chime-sdk/) - Stories of Success Show submenu for Stories of Success - [Remote Video Interpreting Platform with Agent Routing](https://webrtc.ventures/successes/remote-video-translation-platform/) - [WebRTC to SIP Gateway for ASL Interpreters](https://webrtc.ventures/successes/webrtc-to-sip-gateway-for-asl-interpreters/) - [Audio Listening Device to Improve Surgical Outcomes](https://webrtc.ventures/successes/audio-listening-device-to-improve-surgical-outcomes/) - [Albania’s First Telemedicine Platform](https://webrtc.ventures/successes/albanias-first-telemedicine-platform/) - [Automated Video Storytelling with the Amazon Chime SDK](https://webrtc.ventures/successes/automated-video-storytelling-with-the-amazon-chime-sdk/) - [Large Scale Video Conferencing](https://webrtc.ventures/successes/large-scale-video-conferencing/) - [Broadcasting and Webcast Control Room](https://webrtc.ventures/successes/live-video-broadcasting-and-webcast-control-room/) - WebRTC Resources Show submenu for WebRTC Resources - [WebRTC Live](https://webrtc.ventures/webrtc-live/) - [WebRTC Tips](https://www.youtube.com/playlist?list=PLayYqdnyegt3QvxX-Rt6wbFIK8727Z5Oz) - [WebRTC.ventures Blog](https://webrtc.ventures/blog/) - [Migrating From Twilio Video](https://webrtc.ventures/twilio-video/) - [WebRTC.ventures Training Program](https://webrtc.ventures/webrtc-ventures-training-program/) - [About Us](https://webrtc.ventures/our-team/) Show submenu for About Us - [Blog](https://webrtc.ventures/blog/) - [Our Team](https://webrtc.ventures/our-team/) - [Jobs](https://webrtc.ventures/jobs/) Open main navigation Close main navigation - [WebRTC Services](https://webrtc.ventures/webrtc-development-services/) Show submenu for WebRTC Services - [Assess](https://webrtc.ventures/services/assess/) - [Build](https://webrtc.ventures/services/build/) - [Integrate](https://webrtc.ventures/services/integrate/) - [Test](https://webrtc.ventures/services/test/) - [Manage](https://webrtc.ventures/services/manage/) - [Migrating From Twilio Video](https://webrtc.ventures/twilio-video/) - Our Partners Show submenu for Our Partners - [Amazon Chime SDK](https://webrtc.ventures/partners/amazon-chime-sdk/) - Stories of Success Show submenu for Stories of Success - [Remote Video Interpreting Platform with Agent Routing](https://webrtc.ventures/successes/remote-video-translation-platform/) - [WebRTC to SIP Gateway for ASL Interpreters](https://webrtc.ventures/successes/webrtc-to-sip-gateway-for-asl-interpreters/) - [Audio Listening Device to Improve Surgical Outcomes](https://webrtc.ventures/successes/audio-listening-device-to-improve-surgical-outcomes/) - [Albania’s First Telemedicine Platform](https://webrtc.ventures/successes/albanias-first-telemedicine-platform/) - [Automated Video Storytelling with the Amazon Chime SDK](https://webrtc.ventures/successes/automated-video-storytelling-with-the-amazon-chime-sdk/) - [Large Scale Video Conferencing](https://webrtc.ventures/successes/large-scale-video-conferencing/) - [Broadcasting and Webcast Control Room](https://webrtc.ventures/successes/live-video-broadcasting-and-webcast-control-room/) - WebRTC Resources Show submenu for WebRTC Resources - [WebRTC Live](https://webrtc.ventures/webrtc-live/) - [WebRTC Tips](https://www.youtube.com/playlist?list=PLayYqdnyegt3QvxX-Rt6wbFIK8727Z5Oz) - [WebRTC.ventures Blog](https://webrtc.ventures/blog/) - [Migrating From Twilio Video](https://webrtc.ventures/twilio-video/) - [WebRTC.ventures Training Program](https://webrtc.ventures/webrtc-ventures-training-program/) - [About Us](https://webrtc.ventures/our-team/) Show submenu for About Us - [Blog](https://webrtc.ventures/blog/) - [Our Team](https://webrtc.ventures/our-team/) - [Jobs](https://webrtc.ventures/jobs/) - [Contact us](https://webrtc.ventures/contact/) [Contact us](https://webrtc.ventures/contact/) Jul 11, 2018 12:00:00 AM # Telehealth HIPAA Compliance Primer [Maynor](https://blog.webrtc.ventures/author/maynor) Share: [linkedin-in icon](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.webrtc.ventures/2018/07/telehealth-hipaa-compliance-primer) [X Twitter icon](https://twitter.com/intent/tweet?url=https://blog.webrtc.ventures/2018/07/telehealth-hipaa-compliance-primer) [envelope icon](mailto:?body=https://blog.webrtc.ventures/2018/07/telehealth-hipaa-compliance-primer) The Telehealth HIPAA Compliance Primer can be an important feature in telehealth security. **In order to be HIPAA compliant, an organization must be able to show that they have developed their IT systems according to the security and privacy guidelines of the Health Insurance Portability and Accountability Act.** While there is no formal certification process, organizations need to: - keep records about how they secure their data - what policies and procedures they will follow to prevent data breaches - how they will notify users about data breaches These procedures are important **to show that the organization is following best practices and legal requirements, and such documentation may be required before your application can be used by healthcare providers.** ## Where’s my certificate? There’s actually **no HIPAA certification per se**. Sorry- you don’t get a certificate for the office wall! When someone says their system is “HIPAA Compliant”, that usually means they are skating that they have implemented their system to match the regulations of HIPAA as best as possible. **They are essentially self-certifying you can pay an outside consultant to audit your practices, but there is no certification.** The key technical points about HIPAA are that **you must secure access to your system with strong authentication methods, passwords that regularly expire, servers that are patched with the latest updates, and best practices to prevent hacking and data breaches.** These are moving targets, since hackers are usually one step ahead of security practices. **It’s important that your IT team keep your systems up to date.** In addition, all “Protected Health Information,” or PHI, must be… protected. This means that **information that can be used to identify individual patients should be encrypted when stored in your database, and encrypted when in-transit.** The use of HTTPS URL’s with SSL encryption is a good start, but not enough. What if someone can get onto your server? Will they be able to search your database for patient information? **The PHI should be encrypted as much as possible in order to minimize the impact of a data breach.** [![](https://blog.webrtc.ventures/hs-fs/hubfs/Imported_Blog_Media/Screenshot-2018-07-09-09_39_59.png?width=286&height=256&name=Screenshot-2018-07-09-09_39_59.png) ![](https://blog.webrtc.ventures/hs-fs/hubfs/Imported_Blog_Media/Screenshot-2018-07-09-09_39_59.png?width=286&height=256&name=Screenshot-2018-07-09-09_39_59.png)](https://blog.webrtc.ventures/hubfs/Imported_Blog_Media/Screenshot-2018-07-09-09_39_59.png)   It’s also **very important that access to the data in your software is restricted only to those who can see it.** Obviously one patient should never be able to see information about other patients, but it’s also important that software developers don’t have access to real patient data in their development environments. Imagine the most awkward medical information in your very own personal history, and then **design your application and IT practices so that no one can see it without your permission.** ## **Think a Telehealth Solution may be right for your healthcare business?** We have a telehealth platform that is already built and can be quickly white-labeled and licensed for your use.  We have decades of experience with **over 200,000 hours invested in building real-time applications**. You can read a client testimonial [here](https://webrtc.ventures/docto-beta-webrtc/). [Contact us](http://bit.ly/2vG1wPl) today. We’ll help you get your user-friendly, HIPAA-compliant app — up and running with both the provider and patient in mind. [CPaaS](https://blog.webrtc.ventures/tag/cpaas), [Managed Services](https://blog.webrtc.ventures/tag/managed-services), [Events](https://blog.webrtc.ventures/tag/events), [Video Conferencing](https://blog.webrtc.ventures/tag/video-conferencing), [Real Time Weekly](https://blog.webrtc.ventures/tag/real-time-weekly), [WebRTC Architecture](https://blog.webrtc.ventures/tag/webrtc-architecture), [Broadcasting](https://blog.webrtc.ventures/tag/broadcasting), [Medical](https://blog.webrtc.ventures/tag/medical), [WebRTC Live](https://blog.webrtc.ventures/tag/webrtc-live), [Showcase](https://blog.webrtc.ventures/tag/showcase), [Thoughts](https://blog.webrtc.ventures/tag/thoughts), [Vonage](https://blog.webrtc.ventures/tag/vonage), [Daily](https://blog.webrtc.ventures/tag/daily), [Jobs](https://blog.webrtc.ventures/tag/jobs), [Contact Centers](https://blog.webrtc.ventures/tag/contact-centers), [Telehealth](https://blog.webrtc.ventures/tag/telehealth), [Education](https://blog.webrtc.ventures/tag/education), [Technical](https://blog.webrtc.ventures/tag/technical), [General](https://blog.webrtc.ventures/tag/general), [Story of success](https://blog.webrtc.ventures/tag/story-of-success), [The WebRTC.ventures Blog](https://blog.webrtc.ventures/tag/the-webrtc-ventures-blog), [Testing](https://blog.webrtc.ventures/tag/testing), [Gaming](https://blog.webrtc.ventures/tag/gaming), [DevOps](https://blog.webrtc.ventures/tag/devops), [Symbl.ai](https://blog.webrtc.ventures/tag/symbl-ai) ## Related posts [![](https://blog.webrtc.ventures/hs-fs/hubfs/Imported_Blog_Media/The-Road-to-WebRTC-26.jpg?height=200&name=The-Road-to-WebRTC-26.jpg)](https://blog.webrtc.ventures/2018/08/how-to-make-sure-your-telehealth-video-app-is-hipaa-compliant) ## [How to Make Sure Your Telehealth Video App is HIPAA Compliant](https://blog.webrtc.ventures/2018/08/how-to-make-sure-your-telehealth-video-app-is-hipaa-compliant) [Maynor](https://blog.webrtc.ventures/author/maynor) Aug 10, 2018 12:00:00 AM It is important to understand how to make sure your telehealth video app is HIPAA compliant so that... [Read more](https://blog.webrtc.ventures/2018/08/how-to-make-sure-your-telehealth-video-app-is-hipaa-compliant) [![](https://blog.webrtc.ventures/hs-fs/hubfs/Imported_Blog_Media/The-Benefits-of-On-Prem-Hosting-for-Telehealth-Applications.png?height=200&name=The-Benefits-of-On-Prem-Hosting-for-Telehealth-Applications.png)](https://blog.webrtc.ventures/2023/11/the-benefits-of-on-prem-hosting-for-telehealth-applications) ## [The Benefits of On-Prem Hosting for Telehealth Applications](https://blog.webrtc.ventures/2023/11/the-benefits-of-on-prem-hosting-for-telehealth-applications) [Alberto Gonzalez](https://blog.webrtc.ventures/author/alberto-gonzalez) Nov 29, 2023 12:00:00 AM The healthcare landscape has been transformed, especially in the last three years. Telehealth is no... [Read more](https://blog.webrtc.ventures/2023/11/the-benefits-of-on-prem-hosting-for-telehealth-applications) [![](https://blog.webrtc.ventures/hs-fs/hubfs/Imported_Blog_Media/4-Most-Common-Telehealth-Use-Cases.png?height=200&name=4-Most-Common-Telehealth-Use-Cases.png)](https://blog.webrtc.ventures/2018/06/4-most-common-telehealth-use-cases) ## [4 Most Common Telehealth Use Cases](https://blog.webrtc.ventures/2018/06/4-most-common-telehealth-use-cases) [Danielle Daoud](https://blog.webrtc.ventures/author/danielle-daoud) Jun 20, 2018 12:00:00 AM Face-to-face, no matter the place — Telehealth is bringing patients and providers closer than ever... [Read more](https://blog.webrtc.ventures/2018/06/4-most-common-telehealth-use-cases) ### WebRTC.Ventures Services ... - Assess - Build - Integrate - Test - Deploy & Manage ### Contact Us ... **Video should be an opportunity, not a headache.** We’re here to build, integrate, assess and optimize, test, and even deploy and manage your live video application. [Contact us](https://blog.webrtc.ventures/2018/07/telehealth-hipaa-compliance-primer#contact) ### WebRTC Live ... View [past episodes](https://blog.webrtc.ventures/webrtc-live/) of our webinar interview series about the latest webRTC use cases and technical updates. Join our mailing list to learn about upcoming episodes! ![WebRTC Live](https://blog.webrtc.ventures/hs-fs/hubfs/Template%20Images/widged-bannet.webp?height=90&name=widged-bannet.webp) ![logo-main-light](https://blog.webrtc.ventures/hubfs/logo-main-light.svg "logo-main-light") We’re one of the few agencies in the world dedicated to WebRTC development. This dedication and experience is why so many people trust us to help bring live video application dreams to life.   ### Let's get started! ###### **[Contact us today](https://webrtc.ventures/contact/)** **[info@webrtc.ventures](mailto:info@webrtc.ventures)** ### Join our mailing list We don't e-mail often (a few times a month max), and it will be worth it when we do! Of course, we respect your privacy and will not share your contact information. © 2023 WebRTC.ventures, an [AgilityFeat](https://agilityfeat.com/) company / [Privacy Policy](https://webrtc.ventures/privacy-policy//) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Maynor", "url" : "https://blog.webrtc.ventures/author/maynor" }, "dateModified" : "2024-04-03T19:02:28.148Z", "datePublished" : "2018-07-11T04:00:00.000Z", "headline" : "Telehealth HIPAA Compliance Primer", "image" : [ "https://blog.webrtc.ventures/hubfs/Imported_Blog_Media/The-Road-to-WebRTC-13.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.webrtc.ventures/2018/07/telehealth-hipaa-compliance-primer", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.webrtc.ventures/hubfs/logo-main-light.svg" } } } ```