Comments on: How to Have a 100% HIPAA Compliant Online Presence

By: Lucy

Lucy — Tue, 30 Apr 2013 02:52:06 +0000

Thank you, Mike. Super helpful. I really appreciate the discussion and the specific recommendations.

By: Hasani

Hasani — Wed, 06 Mar 2013 01:01:44 +0000

Glad I came across this. We’re frustrated that we can’t get a straight answer about using a autorepapnser like Aweber and Hipaa. Can anyone comment on it? Thx

By: Laura Forsyth

Laura Forsyth — Fri, 14 Dec 2012 22:07:05 +0000

I use Wuala for secure/encrypted cloud storage to back up patient information and notes kept in an encrypted partition of my computer’s hard drive, using TrueCrypt. Thanks to Keely Kolmes, I also use Hushmail, even though it’s kind of clunky. Amazingly enough, Wuala, TrueCrypt & Hushmail all have free versions, which are quite adequate for my solo psychotherapy practice. And, they can all be used on my Android phone. I’m a mid-50s sorta techish psychologist and was able to make it all work (TrueCrypt was the most complicated, but they have very clear directions). Such a deal.

Thanks for the straight up post!

By: DTando

DTando — Fri, 15 Jun 2012 23:34:07 +0000

Thank you so much for this information! Now that MobileMe is getting rid of idisk, I have been doing more research on what to use as a replacement, and what “cloud” technology is safe for storing confidential patient files. Good to know Dropbox is not HIPAA compliant. Any suggestions for what to use instead??

By: L Charles

L Charles — Sun, 04 Mar 2012 11:41:26 +0000

Every time I hear about behaviour described in this article I have to shake my head and wonder. The internet and social networking sites are no longer a new phenomenon, but people will continue to be naive about this. In the UK the data protection act requires that any information held online is available to clients, employees, parents, patients, etc etc etc. Even some of your handwritten process notes can be subpoenaed. Emails are also part of this, and people need to think about what they write. If you wouldn’t be willing to show this to your patient/client/employer, etc, don’t write it on the internet. full stop.

Your concerns and opinions about your clients belong in supervision or personal therapy sessions, and not anywhere else.