HIPAA Compliance
Introduction
The Health Insurance Portability and Accountability Act (including the Privacy Rule, Security Rule, Breach notification Rule, and Health Information Technology for Economic and Clinical Health Act) ("HIPAA"), requires Covered Entities and Business Associates to take certain measures to protect health information that can identify an individual. It also provides certain rights to individuals. Zoho does not collect, use, store, or maintain health information protected by HIPAA for its own purposes. However, Zoho Directory provides certain features (as described below) to help its customers use Zoho Directory in a HIPAA compliant manner.
HIPAA requires Covered Entities to sign a Business Associate Agreement (BAA) with its Business Associates. You can request our BAA template by sending an email to legal@zohocorp.com.
HIPAA Compliance in Zoho Directory
Zoho Directory enables administrators to protect the ePHI of users in their organization with the following measures:
- Mark fields containing ePHI
- Encrypt ePHI field data
- Export ePHI as password-protected files
- Get audit trail
Mark fields that contain ePHI
Zoho Directory provides an option to mark fields that contain ePHI. Administrators can create ePHI fields or mark existing fields as ePHI fields.
To create ePHI fields,
- In the Admin Panel, go to Users.
- Click Manage Fields, then click Add Custom Field.
- Enable the Contains Health Information (ePHI) toggle button and fill out the remaining fields as discussed here.
To mark existing fields as ePHI,
- In the Admin Panel, go to Users.
- Click Manage Fields.
- Hover over the required field and click Edit.
- Enable Contains Health Information (ePHI) toggle button and click Update.
Checkbox, decimal, percent, and pick list fields cannot be marked as ePHI. Learn more about ePHI fields.
You can also mark a field as ePHI when adding it. Learn more.
Encrypt ePHI fields
In Zoho Directory, all fields marked as ePHI will be encrypted by default. Learn more about encryption in Zoho.
Export ePHI as password protected files
Zoho Directory provides an option to export user data under Users in the Admin Panel. Administrators can choose to export this as password-protected files. Learn more.
Get audit trail
Zoho Directory stores a complete audit trail of user activity on all user fields in the backend. You can reach out to support@zohodirectory.com to get the audit trail on ePHI fields.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Reorder security policy
Only one security policy can be applied to a user, and policy priority is used to determine that priority. When a user belongs to different groups assigned to different policies, or when a group is assigned to two different policies, the policy that ...Rename security policy
Sign in to Zoho Directory, then click Admin Panel in the left menu. Go to the Security tab, then go to Security Policies. Click on the policy you want to rename, then click Rename. Enter the new name, then click Rename.Delete security policy
Sign in to Zoho Directory, then click Admin Panel in the left menu. Go to the Security tab, then go to Security Policies. Click on the policy you want to delete, click the icon, then click Delete. Confirm your action by clicking Delete again. You may ...Deactivate security policy
Sign in to Zoho Directory, then click Admin Panel in the left menu. Go to the Security tab, then go to Security Policies. Click on the policy you want to deactivate, click the icon, then click Deactivate. Confirm your action by clicking Deactivate ...Add security policy
General Info: The Free plan allows only the default security policy. The Standard plan allows up to 5 additional security policies. Prerequisites Permissions required to perform this action : Add security policies Add security policy: Sign in to Zoho ...
New to Zoho LandingPage?
Zoho LandingPage Resources