The Office of Information Technology Safeguards Protected Health Information

The Office of Information Technology (OIT) has an ongoing commitment to safeguard protected health information (PHI) as part of the Florida Atlantic University (FAU) educational mission. Recently, FAU signed a business associate agreement (BAA) that made Zoom an approved vendor for Health Insurance Portability and Accountability Act (HIPAA)- and PHI-related activities at the University.

This partnership allows us to utilize Zoom for meetings that may involve the transmission or handling of PHI, ensuring secure and compliant communication at the University:

• Authorized Use of Zoom for PHI Meetings: With the BAA in place, we can now use Zoom confidently for meetings that contain PHI. This enables seamless collaboration while maintaining the necessary privacy and security measures required by HIPAA and the University.
  
  
• Adherence to HIPAA and University Guidelines: While Zoom has been approved for PHI-related activities, it is crucial to remember that users must continue to observe the established HIPAA and University guidelines for handling PHI. Users must follow these guidelines diligently to protect the confidentiality, integrity, and availability of PHI during Zoom meetings.
  
  
• Enhanced Meeting Security Options: To provide an extra layer of security, we will be introducing optional procedures to enhance meeting security on Zoom. These measures will help further protect the privacy of PHI and ensure compliance with University security protocols. You can find detailed instructions on how to implement these security measures at security options.
  
  
• Cloud Recording and PHI Discussions: To maintain the utmost confidentiality, it is strongly recommended to refrain from using cloud recordings for meetings involving the discussion of PHI.

The Zoom platform now offers the accessibility, reliability, security, and privacy that both enable and enhance HIPAA compliance at the University.