HIPAA Compliant Telemedicine, HIPAA Telemedicine

5 Key Tips for HIPAA Compliant Telemedicine


December 21, 2020 | Reading Time: 2 Minutes

Please support Telehealth.org’s ability to deliver helpful news, opinions, and analyses by turning off your ad blocker. How

Before COVID, there weren’t many healthcare providers that offered telemedicine services. But as the need arose, many practices quickly adopted telemedicine as their new norm, and the HHS shifted to a policy of “discretionary enforcement” actions against providers offering telehealth in good faith. However, to ensure the sustainability of your telepractice,  the tools you use, and how you use those tools, you would do well to learn — and only offer HIPAA compliant telemedicine. To provide guidance, HIPAA-compliant telemedicine is discussed in more detail below.

Tips for HIPAA Compliant Telemedicine

When making the transition to a remote environment, many providers had to act quickly and, therefore, did not have the opportunity to create sustainable telemedicine practices. The following are considerations that are necessary to ensure that your telemedicine practice is HIPAA compliant.

  1. Use trusted vendors. When choosing which software platforms to use, it is best to use one designed with healthcare in mind. While the HHS temporarily paused their enforcement efforts surrounding the use of non-public facing telecommunication platforms, for long-term HIPAA compliant telemedicine, providers must use HIPAA compliant tools. For a software provider to be HIPAA compliant, they must have security measures to secure protected health information (PHI) and be willing to sign a business associate agreement (BAA).
  2. Secure data. Data security is a key component. Security measures must include safeguards to ensure the confidentiality, integrity, and availability of PHI.
  3. Control access to data. Part of HIPAA compliance is limiting PHI access to the minimum necessary required to complete a job function. As such, HIPAA compliant tools must allow users to designate different levels of access to PHI through the use of unique login credentials.
  4. Track data use and disclosure. To ensure adherence to the minimum necessary standard and facilitate early detection of breaches, PHI access must be tracked for each user. HIPAA compliant tools for telemedicine allow users to keep audit logs that distinguish PHI access on a per user basis.
  5. Train staff. As software compliance ultimately comes down to how it is used, it is important to train staff on the proper use of the software before they are permitted to use it.

For more information related to telemedicine practice, read about HIPAA Security Measures: Managing Risk in Your Practice and HIPAA Compliant Email for Therapists. 

Find out more about the HIPAA Seal of Compliance® and Compliancy Group.

Essential Telehealth Law & Ethical Issues

Bring your telehealth practice into legal compliance. Get up to date on inter-jurisdictional practice, privacy, HIPAA, referrals, risk management, duty to warn, the duty to report, termination, and much more!

Telepractice: Telehealth Law & Ethics Implementation Workshop

Comply with federal, state, national accreditation and association requirements for telehealth documentation.

Telehealth Law & Ethical Course Bundle

This Telehealth Legal & Ethical Course Bundle provides the most important risk management and telehealth compliance training available anywhere to help meed telehealth, regardless of the size of your telehealth services.

Disclaimer: Telehealth.org offers information as educational material designed to inform you of issues, products, or services potentially of interest. We cannot and do not accept liability for your decisions regarding any information offered. Please conduct your due diligence before taking action. Also, the views and opinions expressed are not intended to malign any organization, company, or individual. Product names, logos, brands, and other trademarks or images are the property of their respective trademark holders. There is no affiliation, sponsorship, or partnership suggested by using these brands unless contained in an ad. Some of Telehealth.org’s blog content is generated with the assistance of ChatGPT. We do not and cannot offer legal, ethical, billing technical, medical, or therapeutic advice. Use of this site constitutes your agreement to Telehealth.org Privacy Policy and Terms and Conditions.

Was this article helpful?

Please share your thoughts in the comment box below.

Notify of
1 Comment
Newest Most Voted
Inline Feedbacks
View all comments
Online Prescription Refill
Online Prescription Refill
1 month ago

This article is great for teaching how to incorporate HIPAA Compliant in telemedicine visits. Thanks for sharing!

Register for Free

Receive Any of Our 57 FREE Newsletters!


Most Popular Blog Topics

You May Also Like…

ChatGPT HIPAA Considerations
ChatGPT HIPAA Considerations

ChatGPT HIPAA compliance is one of the hottest topics at 2023 conferences and with good reason. AI...