How does Zoho manage personal health information fields to comply with HIPAA?
To mark fields that contain personal health data
Go to Setup > Customization > Modules and Fields.
Select a module and click the More icon to select the desired layout.
Alternately, you can click the More icon and select Edit Layout.Go to the desired field and click the More icon.
Click Edit Properties and check the Contains Personal Health Data box.
Remember that this option will only appear if the module has been selected for HIPAA compliance.
- Restrict data access through API: Other applications can connect with CRM using API and data can be transferred. You can ensure that personal health data of your customers is not shared in the process, by restricting transfer of personal health data to other applications via API.
- Restrict data export: While exporting data from the CRM account, you may want to withhold personal health information from being exported by checking this option.
- Restrict data transfer to Zoho apps: If the CRM account is integrated with other Zoho applications like Desk, Campaigns, and Projects, the data will flow from the CRM to these applications. This option will prevent personal health data from being transferred to other apps. To check the data flow restrictions, refer to the table.
- Restrict data transfer to third party apps: If your CRM account is integrated with third-party applications for business-related reasons, there will be chances of data flow from CRM to these apps. This option will prevent personal health data from being transferred to other apps. To check the data flow restrictions, refer to the table
To set restrictions on PHI fields
Go to Setup > Users and Controls > Compliance Settings.
Click the HIPAA Compliance tab.
Toggle the Enable HIPAA Compliance Settings button.
Select the modules from the dropdown list. You can select up to 10 modules.In Personal Health Data Handling, toggle Restrict Data access through API, Restrict Data in Export, or both, as required.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Still can't find what you're looking for?
Write to us: support@zohoforms.com
Zoho Sign Resources
Sign, Paperless!
Zoho SalesIQ Resources
Zoho TeamInbox Resources
Zoho DataPrep Resources
Design. Discuss. Deliver.
Related Articles
HIPAA Compliance with Zoho CRM
The Health Insurance Portability and Accountability Act (including the Privacy Rule, Security Rule, Breach notification Rule, and Health Information Technology for Economic and Clinical Health Act) ("HIPAA"), requires Covered Entities and Business ...How do I configure HIPAA Compliance in my CRM account?
With more healthcare organizations using CRM to run their business smoothly and store customer information in a shared database, it is crucial that they can ensure the confidentiality of an individual's health information. In Zoho CRM, we provide ...What kind of restrictions can be set for the PHI fields under HIPAA Compliance?
A total of 25 fields in each module can be marked as personal health data containing fields. Once marked, there are certain restrictions that can be set to prevent unauthorized access to the sensitive values present in the fields. Note: Lookup, ...Marking Personal Fields
GDPR defines personal data as any information relating to an identified or identifiable natural person (i.e. the data subject). There is a wide range of personal data that includes email addresses, location, mobile numbers, identification numbers, ...Where do I find the option to mark fields as personal health information?
In a module, there may be only a few fields that contain personal health details of a customer. For example, surgical history, symptoms, medication details, etc. Marking these fields as personal health details will help the system identify and ...