HIPAA compliance in Zoho DataPrep

Zoho DataPrep with HIPAA Compliance



The Health Insurance Portability and Accountability Act, HIPAA (including the Privacy Rule, Security Rule, Breach Notification Rule, and Health Information Technology for Economic and Clinical Health Act), requires Covered Entities and Business Associates to take certain measures to protect health information that can identify an individual. It also provides certain rights to individuals.

Zoho does not collect, use, store or maintain health information protected by HIPAA for its own purposes. However, Zoho DataPrep provides certain features (as described below) to help its customers use DataPrep in a HIPAA compliant manner. HIPAA requires Covered Entities to sign a Business Associate Agreement (BAA) with their Business Associates. You can request our BAA template by sending an email to legal@zohocorp.com.

Zoho DataPrep is SOC2+HIPAA Type 2 compliant. Zoho DataPrep provides the following features to help its customers use DataPrep in a HIPAA compliant manner.

Mark PII and ePHI data

Zoho DataPrep helps you mark a column that contains ePHI (Electronic protected health information ) data using the Mark PII and ePHI data transform. This also helps users apply relevant controls like access control and apply security measures such as masking and tokenization during export, to the columns marked as ePHI data. Click here to learn more.

Roles and sharing permissions

Zoho DataPrep has roles for users based on their entity permissions. In other words, the user roles in DataPrep is based on the user's access to each entity like, workspace, datasets, etc. The following are the available user roles in DataPrep:
  1. Account admin
  2. Organization admin
  3. Shared user


Encryption

ePHI data encryption is advised to prevent anyone from breaching the security and accessing or tampering with the ePHI data. In Zoho DataPrep, all user data including ePHI data is encrypted at rest and in transit by default.

Audit 

Zoho DataPrep provides audit logs for the access and activity details of all data including ePHI data in your DataPrep organization using the Audit option. 

Access Audit - This option monitors all the users who access entities in your organization. Learn more

Activity Audit - This option monitors all the user activities in your organization. Learn more

Note: Only the admin can access the Audit Logs.

Audit trial retention

Zoho DataPrep allows the users to export the activity and access audit logs for the last two years. The Admin can use the export option and download the audit trial logs of the previous 2 years using the link which will be sent to the registered email ID.

Note: The audit logs can be exported from the time the access or activity audit is enabled and not from the time when the organization was created.

Access controls of ePHI data

Users can manage how to process health related private data to comply with HIPAA regulations in the Compliance Settings.



Note: The Compliance settings are accessible only to the Account admin in the organization.
 
Zoho DataPrep provides the below features to manage and control the access of epHI data:

Restrict ePHI data transfer to Zoho Apps : Using this option, you can exclude ePHI columns from being exported to other Zoho Apps. 

Restrict ePHI data transfer to Third-party Apps : Using this option, you can exclude ePHI data columns from being exported to Third-party Apps.

Secure ePHI columns before export : This option allows you to make the users in your organization to secure ePHI data before exporting. Learn more

Export ePHI data with password protection : This option helps you restrict users from exporting datasets containing ePHI columns without password protection. Learn more about other protection methods in DataPrep.

How to enable HIPAA compliant features?

1. Click the Enable HIPAA Compliance toggle to submit a request to sign BAA and enable HIPAA compliant features.

2. The enable request is sent to our support team via email.

3. Once our support team is done with the background verification of BAA, the HIPAA compliant features will be enabled for your organization. 

Note: You can also disable HIPAA features using the Enable HIPAA Compliance toggle. Once our support team validates your request, HIPAA features will be disabled.

Modification of Terms of Use

Zoho reserves the right to modify the Terms. Modifications to the Terms are effective upon your use of Zoho DataPrep subsequent to publication of such modification.

Disclaimer: The content presented here is not to be construed as legal advice. This is a guideline on how Zoho DataPrep provides control to the organizations to be HIPAA compliant. Please contact your legal advisor to know how HIPAA is applicable and how it impacts your organization and the processes involved to be HIPAA compliant.

SEE ALSO

    Access your files securely from anywhere

      Zoho CRM Training Programs

      Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.

      Zoho CRM Training
        Redefine the way you work
        with Zoho Workplace

          Zoho DataPrep Personalized Demo

          If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.

          Zoho CRM Training

            Create, share, and deliver

            beautiful slides from anywhere.

            Get Started Now


              Zoho Sign now offers specialized one-on-one training for both administrators and developers.

              BOOK A SESSION






                          Quick Links Workflow Automation Data Collection
                          Web Forms Enterprise Begin Data Collection
                          Interactive Forms Workplace Data Collection App
                          Offline Forms Customer Service Accessible Forms
                          Digital Forms Marketing Forms for Small Business
                          HTML Forms Education Forms for Enterprise
                          Contact Forms E-commerce Forms for any business
                          Lead Generation Forms Healthcare Forms for Startups
                          Wordpress Forms Customer onboarding Order Forms for Small Business
                          No Code Forms Construction RSVP tool for holidays
                          Free Forms Travel
                          Prefill Forms Non-Profit

                          Intake Forms Legal

                          Form Designer HR

                          Card Forms Food
                          Assign Forms Photography

                          Translate Forms Real Estate
                          Electronic Forms

                          Notification Emails for Forms Alternatives
                          Holiday Forms Google Forms alternative 
                          Form to PDF Jotform alternative





                                            You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.




                                                Manage your brands on social media

                                                  Zoho Desk Resources

                                                  • Desk Community Learning Series


                                                  • Digest


                                                  • Functions


                                                  • Meetups


                                                  • Kbase


                                                  • Resources


                                                  • Glossary


                                                  • Desk Marketplace


                                                  • MVP Corner


                                                  • Word of the Day


                                                    Zoho Marketing Automation

                                                      Zoho Sheet Resources

                                                       

                                                          Zoho Forms Resources


                                                            Secure your business
                                                            communication with Zoho Mail


                                                            Mail on the move with
                                                            Zoho Mail mobile application

                                                              Stay on top of your schedule
                                                              at all times


                                                              Carry your calendar with you
                                                              Anytime, anywhere




                                                                    Zoho Sign Resources

                                                                      Sign, Paperless!

                                                                      Sign and send business documents on the go!

                                                                      Get Started Now




                                                                              Zoho TeamInbox Resources



                                                                                      Zoho DataPrep Resources



                                                                                        Zoho DataPrep Demo

                                                                                        Get a personalized demo or POC

                                                                                        REGISTER NOW


                                                                                          Design. Discuss. Deliver.

                                                                                          Create visually engaging stories with Zoho Show.

                                                                                          Get Started Now









                                                                                                              • Related Articles

                                                                                                              • Zoho DataPrep with HIPAA Compliance

                                                                                                                The Health Insurance Portability and Accountability Act, HIPAA (including the Privacy Rule, Security Rule, Breach Notification Rule, and Health Information Technology for Economic and Clinical Health Act), requires Covered Entities and Business ...
                                                                                                              • GDPR Compliance in Zoho DataPrep

                                                                                                                The European Union has taken a monumental step in protecting the fundamental right to privacy for every EU resident with the General Data Protection Regulation (GDPR) effective from May 25, 2018. Simply put, EU residents will now have greater say ...
                                                                                                              • Zoho DataPrep - FAQs

                                                                                                                1. What is Zoho DataPrep? Zoho DataPrep is an advanced self-service data preparation tool that helps organizations model, cleanse, prepare, enrich and organize large volumes of data from multiple data sources to serve data analytics and data ...
                                                                                                              • Encryption at Zoho DataPrep

                                                                                                                Encryption is primarily used to safeguard the contents of a message so that only the intended recipient could read it. This is done by replacing the contents with unrecognizable data, which could be understood only by the intended recipient. This is ...
                                                                                                              • Ruleset in Zoho DataPrep

                                                                                                                This page covers the following sections: What is a Ruleset? Data source settings Ruleset operations Options with individual rules Ruleset Templates What is a Ruleset? Each transform applied on the data is stored in DataPrep as a rule, in order of ...
                                                                                                                Wherever you are is as good as
                                                                                                                your workplace

                                                                                                                  Resources

                                                                                                                  Videos

                                                                                                                  Watch comprehensive videos on features and other important topics that will help you master Zoho CRM.



                                                                                                                  eBooks

                                                                                                                  Download free eBooks and access a range of topics to get deeper insight on successfully using Zoho CRM.



                                                                                                                  Webinars

                                                                                                                  Sign up for our webinars and learn the Zoho CRM basics, from customization to sales force automation and more.



                                                                                                                  CRM Tips

                                                                                                                  Make the most of Zoho CRM with these useful tips.



                                                                                                                    Zoho Show Resources