Our careful analysis of the way Signal handles PHI leads us to believe that they qualify as a conduit under the HIPAA Business Associate Rule. They don’t do a Business Associate Agreement. Consider that if maintaining the procedures you need to use Signal and be HIPAA compliant are outside your capabilities, there are paid options out there for secure texting that provide more support for your HIPAA-and-ethics-related documentation needs. See our article on documenting texts and emails for some guidance.
Please read the notes below quite carefully, and ensure you have a set of procedures in place for using Signal properly before you introduce it into your practice. However, its highly private nature makes it harder to document the messages you exchange using it. That said, Signal is easy to use for secure communications. Once again, we strongly encourage therapists to consider the costs and benefits of using Signal in their practices if for no other reason than the fact that it is likely to be a convincing way to get clients to use a truly secure option when they text with their therapist. That’s not just because it’s secure, but also because it’s easy to use and is likely to be a very effective “gateway” for therapists and clients to start taking secure communications more seriously. This is all great, and we strongly endorse the use of Signal. It is funded by numerous private and non-profit donors, and it is endorsed by security luminaries such as Edward Snowden and Bruce Schneier. Although it is created by a company, Open Whisper Systems, the purpose of Signal is to be of public value.
We made this review public because Signal is a service to the public. It is intended to be private enough to prevent anyone but the people involved in a conversation from being able to read any messages in that conversation. Signal is a free and open source texting app that works on iPhones and Android phones, and is highly private.
If you want access to all of our HIPAA-propriateness reviews, please subscribe to Person-Centered Tech Support today. Generally, our HIPAA-propriateness reviews are only available to members of Person-Centered Tech Support, but this one is special.
0 kommentar(er)
