HIPAA Compliance in Zoho Projects
INTRODUCTION
The Health Insurance Portability and Accountability Act (including the Privacy Rule, Security Rule, Breach notification Rule, and Health Information Technology for Economic and Clinical Health Act) ("HIPAA"), requires Covered Entities and Business Associates to take certain measures to protect health information that can identify an individual. It also provides certain rights to individuals. Zoho does not collect, use, store or maintain health information protected by HIPAA for its own purposes. However, Zoho Projects provides certain features (as described below) to help its customers use Zoho Projects in a HIPAA compliant manner.
HIPAA requires Covered Entities to sign a Business Associate Agreement (BAA) with its Business Associates. You can request our BAA template by sending an email to legal@zohocorp.com.
HIPAA compliance in Zoho Projects
To ensure the security of your information, you can take the following actions in Zoho Projects:
- Mark ePHI fields to distinguish their data
- Encrypt data entered into ePHI designated fields
- Administer roles and permissions to secure data
- Export audit trail to monitor operational activities
Marking ePHI Fields
You can mark a field as ePHI if it contains the health information of your customers or patients.
To mark fields that contain personal health data:
- Navigate to
> Customization > Layout and Fields.
- Select a module to view layouts.
- Select the desired layout to edit it.
- Go to the desired field and click the
icon.
- Click Edit Properties and check the PII or PHI box. Marking the field as PHI will automatically turn on the Encrypt field option. Nevertheless, you can turn it OFF manually (not recommended).
- Click Update and save the layout.
Encrypting ePHI Field Data
Fields that contain personal health information can be encrypted for additional security. Though field encryption is not a mandatory step in Zoho Projects, we strongly recommend you enable encryption as it is the best practice to prevent unauthorized access to confidential data. Read this articles here to learn more about encrypting fields in Zoho Projects.
Administering Roles and Permissions
Roles and profiles on Zoho Projects let you define permissions, so you can tightly control who in your organization has access to what information. Field-level permissions help you take this a step further.
Exporting Audit Trail
Zoho Projects stores the audit logs—that is, information about every addition, update, and deletion made to your database records—in the backend. We have provided an option to export this data, which can be done using the Export Data option under Setup.
Other Security Related References for Zoho Projects
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Compliance
Is Zoho Projects DCAA Compliant? While our product is not evaluated for DCAA compliance, we do offer comprehensive set of features that allows users to log time and track their work. Please refer to our help doc for more information: ...DocuSign for Zoho Projects
The DocuSign extension for Zoho Projects provides users with the e-signature functionality required to quickly complete approvals and agreements. With this extension, you can send documents, view their signing status, and even revoke the document ...Checklist for Zoho Projects
The Checklist for Zoho Projects extension lets you create a set of instantaneous to-do lists for your tasks and issues in Zoho Projects. With this extension, you can create both checklists and templates that can be used for any of your tasks and ...Zoho Projects: An Overview
Zoho Projects is an online project management software that helps you run your business with ease. It stands as a comprehensive solution to your day-to-day problems in project management and adds value to your business by leaps and bounds. Here is a ...Zoho Vault for Zoho Projects
Zoho Vault is an online password manager for teams. If you are struggling with remembering numerous passwords, Zoho Vault can keep them safe for you. It helps to store, share, and manage your passwords from anywhere. Zoho Vault is the best way to ...
New to Zoho LandingPage?
Zoho LandingPage Resources