Technology opens powerful gateways and new opportunities for communicating with patients. In this modern age, some medical professionals are turning to Instagram to spread their message. Instagram is free, simple to navigate, and used worldwide, but: is Instagram HIPAA compliant?
SEE ALSO: Social Media & HIPAA Compliance: The Ultimate Guide
Instagram is a free, photo and video-sharing app where users can interact with one another’s content through likes, comments, and private messaging. The platform has attracted over 1 billion users since its launch in 2010. With over 120 million active users in the United States , Instagram is undoubtedly one of the most popular social media apps available.
Instagram is a powerful platform to reach a wide range of users, so it’s no surprise why medical professionals are using it to disseminate information. Sharing medical best practices and other educational information is at an all-time high with the COVID-19 pandemic. Instagram even wrote a blog post about how the platform can be used to promote accurate information about the disease while discouraging misinformation. Medical professionals are leveraging social media more than ever to broadcast important updates about coronavirus, but they must be careful to avoid HIPAA violations while doing so.
A business associate is a person or company that performs certain functions or activities that involve the use or disclosure of protected health information (PHI) for a covered entity. If a business associate handles, stores, or in any way uses PHI for a covered entity, then a business associate agreement (BAA) must be in place. A BAA is a written contract between a covered entity and a business associate and is required by law for HIPAA compliance.
Instagram will not sign a BAA with covered entities. However, this does not mean healthcare providers cannot use it. It simply means that covered entities must steer clear of transmitting any PHI via the platform.
SEE ALSO: Social Media for Healthcare Professionals—What to Watch For Conclusion: Instagram is not HIPAA compliant because it will not sign a BAA. However, covered entities can use it—as long as they do not share any PHI.
The only true safeguard against HIPAA violations and hefty HIPAA fines is using HIPAA compliant software. Fortunately, a HIPAA compliant marketing tools exists which can help your practice grow: Paubox Marketing . Its military-grade encryption lets you send HIPAA compliant email directly to your recipients email inboxes with no plugins or portals required.