How to Enable HIPAA Compliance?

October 19, 2023

Jotform HIPAA accounts are served from an isolated HIPAA system. In that system, we are taking additional measures in addition to our standard practices to avoid unintentional data breaches. When you enable HIPAA compliance features, all your data is migrated to the isolated system supporting HIPAA guidelines.

You may create a new account or enable HIPAA compliance features from your existing Jotform account. The HIPAA upgrade wizard will help you navigate through the end.

Youtube Embed Poster: gHyhgYqQ1co

The upgrade wizard can be initiated from your account’s Data page.

Data page showing the Enable HIPAA Compliance button

After clicking the Enable HIPAA Compliance button, the setup wizard will go through the following:

Upgrade Account

The upgrade wizard will first check your subscription type. We are offering HIPAA compliance features only for Gold subscriptions. You will see the following message if you don’t have a Gold subscription.

Upgrade prompt when enabling HIPAA compliance features

Verify Your Email Address

The upgrade wizard will check if you have verified your email address. If you have not already verified your email address, you will see the following message:

Verify email when enabling HIPAA compliance features

Set a Strong Password

HIPAA Compliance requires the use of strong passwords. The upgrade wizard will ask you to define a new password if you have a weak one, which will be your new password to log in to your HIPAA account.

The new password has to follow the HIPAA guidelines where your password must be different from your last 6 passwords and contain at least:

  • 1 lowercase letter
  • 1 uppercase letter
  • 1 number
  • 1 special character
  • 8 characters

If you’ve already created the account with a strong password, you should see the following message:

Set strong password when enabling HIPAA compliance features

The setup wizard will ask for your consent to move your data to our HIPAA server, which provides high-level security.

Tick on the “I understand and agree” checkbox and the Next button.

Data transfer consent when enabling HIPAA compliance features

Form Review

In this step, the upgrade wizard will review all your forms for HIPAA compliance. To avoid any HIPAA compliance issues, Jotform will only allow widgets and integrations that help with HIPAA compliance in your forms. If the wizard detects any elements in your forms unsuitable for HIPAA compliance, it will list them.

The setup wizard will show the following message if no issues are found.

Form review screen when enabling HIPAA compliance features

Click the Next button to start the form migration process.

Form Migration

The setup wizard will show a message that your forms and submissions are ready for migration.

Form migration screen when enabling HIPAA compliance features

Click the Start Migration button to proceed. This will trigger the automated migration process for your forms. Once the migration is completed, you will be redirected to the Data page to sign the BAA. You will also receive a confirmation email, as shown below, stating the completion of the HIPAA compliance features wizard.

Email message when HIPAA compliance features are completed

Sign a Business Associate Agreement (BAA)

Now that you have completed the HIPAA compliance features, the last step would be to sign the Business Associate Agreement (BAA). To do so, click the Sign BAA button after being redirected to the Data page.

Sign BAA button through the Data page  after completing the HIPAA compliance wizard

Please fill up the BAA form, scroll down, and click the Submit button to complete it. You will receive a confirmation message through the form.

How to Enable HIPAA Compliance? Image-1

You can now close the page and wait for the copy of the BAA through email. The email will look like the below image (Outlook interface):

Business Associate Agreement (BAA) sent through email after signing the BAA form

Considering you’ve already signed the BAA, the Sign BAA button through the Data page will be replaced with the View BAA button. Click that button to view and download a copy of your BAA.

Copy of the signed BAA with the button to download as a PDF file

Congratulations! Your account, forms, and data are now enabled for HIPAA Compliance. The HIPAA Compliance badge is automatically added to your account and forms.

See also: How to Make Sure Your Forms Are Suitable for HIPAA Compliance.

HIPAA-Friendly Online Forms

Organize patient health records with forms that can help you comply with HIPAA.

Learn More
HIPAA-Friendly Online Forms
Contact Support:

Our customer support team is available 24/7 and our average response time is between one to two hours.
Our team can be contacted via:

Support Forum: https://www.jotform.com/answers/

Contact Jotform Support: https://www.jotform.com/contact/

Send Comment:

Jotform Avatar
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Comments:

  • Reinaldo Crespo - Profile picture
  • Jutta Ulrich - Profile picture
  • Jean Metivier - Profile picture
  • DiverseAbility - Profile picture
  • Dwi Edhityasrini Pratikto - Profile picture
  • Tiffany Michelle Holm - Profile picture