HIPAA use needs a BAA and an ePHI-Enabled Software Service
Catalog row in Vendor License Rules · Cited
- Kind
- Use rights
- Statement
- PUT 1.7 and 2.6: Software Services are not intended for ePHI unless the customer has a subscription to the applicable ePHI-Enabled Software Service and a BAA is in place. (effective 2026-08-18)
- Applies when
- Handling health data
- Applies to
- Customers processing PHI