Industry Guides
How to Run HIPAA-Compliant Email Marketing
HIPAA-compliant email marketing comes down to three things: keep protected health information out of marketing emails, get written authorization before any marketing use of PHI, and sign a BAA with every vendor in the data path. This guide covers what counts as PHI, the list-separation architecture most practices use, the operational safeguards required, and the mistakes that cause reportable breaches.
Sep 28, 20269 min read