Understanding HIPAA Features in Zoho Campaigns
The Health Insurance Portability and Accountability Act, (including the Privacy Rule, Security Rule, Breach notification Rule, and Health Information Technology for Economic and Clinical Health Act), ("HIPAA"), requires Covered Entities and Business Associates to take certain measures to protect health information that can identify an individual. It also provides certain rights to individuals. Zoho does not collect, use, store or maintain health information protected by HIPAA for its own purposes. However, Zoho Campaigns provides certain features to help its customers use Zoho Campaigns in a HIPAA compliant manner.
HIPAA requires Covered Entities to sign a Business Associate Agreement (BAA) with its Business Associates. You can request our BAA template by sending an email to legal@zohocorp.com.
How to apply HIPAA features in Zoho Campaigns?
Admins in Zoho Campaigns can secure and restrict export of protected health information(PHI) by doing the following:
Marking fields that contain PHI: Marking fields containing PHI will help the system identify and restrict access to these fields through API and prevent the export of these field values. For example, fields that contain surgical history, symptoms, medication details, etc
Note: Only Custom fields can be marked as fields with PHI. Standard fields cannot be marked
Setting restrictions for the data marked as PHI: There are two options for restricting personal health data from being accessed outside Campaigns. Any of these options can be enabled depending on the org's requirements:
- Restrict data access through API: Other applications can connect with Zoho Campaigns using API and data can be transferred. You can ensure that personal health data of your customers is not shared in the process, by restricting transfer of personal health data to other applications via API.
- Restrict data export: While exporting data from the Zoho Campaigns account you may want to withhold personal health data from being exported by checking this option.
- Encrypting PHI fields: Fields that contain PHI can be encrypted for additional security. Though field encryption is not a mandatory step in Zoho Campaigns, we strongly recommend you enable encryption as it is the best practice to prevent unauthorized access to confidential data.
Note: The custom fields are not encrypted by default. You are required to encrypt it manually.
How to configure HIPAA compliance?
- Click Settings icon on the top-right corner of the screen.
- Under General, select Compliance settings.
- Click HIPAA Compliance.
- Toggle the HIPAA compliance settings Switch on. Once you toggle this on, switches that enable restriction of personal health data appear.
- Toggle Restrict data export switch or Restrict data export through APIs switch on. This restricts users from sharing data.
How to mark a field as containing personal health data?
- Click Settings icon on the top-right corner of the screen.
- Under Customization, select Custom Fields.
- Click Create Custom Field in the Accounts page.
- Check Contains Personal health data check box, after filling out the custom field details. You can also edit an existing field and mark or unmark it as containing personal health data.
How to encrypt a field containing PHI?
- Click Settings icon on the top-right corner of the screen.
- Under Customization, select Custom Fields.
- Click Create Custom Field in the Accounts page.
- Check the Encrypt Field box on, after filling out the custom field details, and click Add. You can also edit an existing field and encrypt or decrypt its data.
How to disable HIPAA compliance?
- Click Settings icon on the top-right corner of the screen.
- Under General, select Compliance settings.
- Click HIPAA Compliance.
- Toggle the HIPAA compliance settings to disable it. Once you toggle this off, a confirmation dialog box appears.
- Click Go Ahead.
- Once you disable HIPAA compliance, the restriction to export and other activities related to it gets revoked.
Retrieving the audit log
We allow you to export data as and when required using the Export Audit Log option. In Zoho Campaigns audit log is available for 6 months by default. In case you require data beyond 6 months you can reach out to support@zohocampaigns.com.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Centralize Knowledge. Transform Learning.
All-in-one knowledge management and training platform for your employees and customers.
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Key features of Zoho Campaigns
Zoho Campaigns is an email marketing tool that helps businesses communicate better with their customers. It allows you to create professional-looking email campaigns, send them to the right audience at the right time, and track how they interact with ...SMS Campaigns
Zoho Campaigns has added an in-house SMS gateway for users. You can send SMS campaigns to Canada, USA, and India using this gateway. We are planning to support sending SMS campaigns to more countries in the future. You can purchase SMS credits by ...Email marketing with Zoho Campaigns
Email marketing is a way to communicate with a large audience using emails. These emails can be used to stay in touch, share information about your products or services, and build good relationships with your audience. Businesses also use email ...Understanding Dashboard FAQ
1. What information does the Zoho Campaigns dashboard show, and what are its limitations? The Zoho Campaigns dashboard provides a high-level, real-time summary of your email marketing activity. It is designed to help you quickly monitor campaign ...What happens to my data if my account gets deactivated?
Zoho Campaigns deactivate accounts that have been inactive for a long time for security reasons. We will be sending warning/notification emails about the deactivation before deactivating the account, you can export your data before the mentioned time ...
New to Zoho LandingPage?
Zoho LandingPage Resources