Learn about HIPAA

Health Insurance Portability and Accountability Act (HIPAA)

HIPAAtizer is all about compliance with the Health Insurance Portability and Accountability Act (HIPAA). HIPAA mandates certain levels of data privacy and security as it relates to protected health information (PHI) and electronic protected health information (ePHI). This covers all paper and electronically stored or transmitted individually identifiable information relating to a patient’s past, present, or future health status.

HIPAAtizer is a Business Associate as defined by the HIPAA regulations. Our forms are ONLY functional in an exclusively HIPAA‑Compliant environment. There is no guesswork with HIPAAtizer, our forms are always HIPAA Compliant.

HIPAA Requirements

So that all of our partner Covered Entities can sleep well at night knowing we are on top of the HIPAA requirements, we’ve implemented the following:

1. 1. Completed all 5 required HIPAA audits

      • • Privacy Policy Audit
      • • Security Standards Audit
      • • HITECH Act Subtitle D, IT Security Risk Analysis
      • • Asset & Device Audit
      • • Physical Site Audit

1. 1. Undertake an Annual Security Risk Analysis

1. 1. We’ve implemented the necessary breach notification policies

1. 1. Ensure that all employees rigorously follow the training requirements

1. 1. Monitor changes to HIPAA legislation

1. 1. Adopted all relevant policies to ensure that the PHI you entrust us with is handled safely, following the strictest guidelines

1. 1. Undergone full certification and audit of our policies and procedures by a third party.

If you have any questions regarding our HIPAA policies and procedures, please contact our Security Officer at info@hipaatizer.com.

HIPAA-Compliant online forms are those that meet the Security and Privacy guidelines of the Health Insurance Portability and Accountability Act (HIPAA). For online forms to be fully HIPAA-Compliant, all PHI data should be encrypted at rest and in transit. For this, HIPAAtizer uses FIPS 140-2 compliant encryption. In addition to data encryption, HIPAA requires that the PHI data be securely backed-up and that all deletions are permanent.

Related blog posts:

1. 1. The Hidden Costs of Non-Compliance: Why Your Online Forms Need to Be HIPAA-Compliant. Learn more

1. 1. How to Build and Publish a Secure HIPAA-Compliant Form in 3 Easy Steps. Learn more

1. 1. How to Make Your Existing Online Forms HIPAA Compliant: Step-by-Step Guide. Learn more.

1. 1. The Most Comprehensive Guide to HIPAA-Compliant Web Forms. Learn more.

A release form is a legal document signed by one party that grants another party permission to use specific information, images, content, or services, and waives certain rights or claims in exchange. In healthcare, release forms most commonly refer to medical records release forms (also called a Release of Information or ROI form), which authorize a provider to share a patient’s Protected Health Information (PHI) with a designated recipient, such as another provider, insurer, or the patient themselves.

Release forms typically specify what information is being released, to whom, for what purpose, and for how long the authorization remains valid. Under HIPAA, a valid authorization form must meet specific requirements before PHI can be lawfully disclosed.

Beyond healthcare, release forms are also used in media production, employment, research, and events to document consent and limit liability.

For healthcare practices collecting release forms digitally, using a HIPAA-Compliant platform like HIPAAtizer ensures patient signatures and submitted data are securely stored and legally protected under your Business Associate Agreement (BAA).