Google Chat, formerly known as Google Hangouts, is a communication service that supports messaging, voice calls, and video calls. It allows users to engage in conversations, share files, and collaborate across teams while integrating with Google Workspace services such as Gmail and Google Meet.

With Google Chat, organizations can streamline communication and collaboration through a unified platform for internal and external communication.

Is Google Chat HIPAA compliant? Yes, based on our research, Google Chat can be HIPAA compliant when used as part of Google Workspace and configured in accordance with Google's HIPAA requirements.

 

What changed this year?

As of June 2026, our review did not identify any publicly disclosed changes to Google Chat's HIPAA-related policies or business associate agreement (BAA) terms. Google continues to offer a BAA covering eligible Google Workspace services, including Google Chat.

 

Will Google Chat sign a business associate agreement (BAA)?

Yes, Google Chat will sign a business associate agreement as part of Google's HIPAA support for eligible Google Workspace customers. Google's Business Associate Agreement can be reviewed here.

 

What does the Google Chat BAA cover?

The Google BAA covers the use and disclosure of protected health information (PHI), stating, “All users can access this subset of Core Services for use with PHI under the BAA as long as the health care organization configures those services to be HIPAA compliant: Gmail, Calendar, Drive, Gemini for Google Workspace, Google Chat, Google Meet, Keep, Google Cloud Search, Google Voice, Sites, Google Groups, Jamboard, Cloud Identity Management, Tasks, and Vault.”

Their BAA covers:

  • Use of Google Chat with protected health information (PHI)
  • Protection and safeguarding of PHI
  • Security and privacy obligations required by HIPAA
  • Use of eligible Google Workspace Core Services under the BAA
  • Support for healthcare organizations that properly configure services for HIPAA compliance
  • Google's responsibilities as a business associate regarding PHI

 

Conclusion

Google Chat signs a Business Associate Agreement and is therefore HIPAA compliant when used as part of an eligible Google Workspace subscription and configured according to Google's HIPAA requirements.

Learn more: HIPAA Compliant Email: The Definitive Guide

 

FAQs

What is a business associate agreement?

A business associate agreement (BAA) is a legally binding contract establishing a relationship between a covered entity under the Health Insurance Portability and Accountability Act (HIPAA) and its business associates. The purpose of this agreement is to ensure the proper protection of personal health information (PHI) as required by HIPAA regulations.

 

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting the privacy and security of certain health information, known as protected health information (PHI).

HIPAA is designed to protect the privacy and security of individuals’ health information and to ensure that healthcare providers and insurers can securely exchange electronic health information. Violations of HIPAA can result in significant fines and penalties for covered entities.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities that perform certain functions or activities on behalf of the covered entity.

c health information. Violations of HIPAA can result in significant fines and penalties for covered entities.

 

Who does HIPAA apply to?

HIPAA applies to covered entities, which include healthcare providers, health plans, and healthcare clearinghouses. It also applies to business associates of these covered entities. These are entities that perform certain functions or activities on behalf of the covered entity.