HHS releases guidance on when HIPAA applies to mobile apps

Editor's Note

The US Department of Health and Human Services (HHS) has released guidelines on how the Health Information Portability and Accountability Act (HIPPA) applies to health information a patient creates or manages through a health app and when app developers are required to comply with HIPPA rules.

The new guidance examines six scenarios that address whether an app developer would be considered a HIPPA business associate and, thus, must comply with the law.

App developers that are business associates of covered entities such as providers or health plans are required to comply with HIPPA rules.

Developers whose apps are downloaded by users who have control over the transmission of data in most instances are not covered by the law.