# HIPAA: US Health Insurance Portability and Accountability Act

> US rules protecting health information, applying to covered entities and their business associates.

URL: https://securei3.com/standards/hipaa/
Category: Global & regional laws: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


HIPAA's Privacy, Security and Breach Notification Rules set requirements for protecting health information. We help business associates (especially offshore service providers) perform the required risk analysis, implement administrative, physical and technical safeguards, and prepare breach response procedures.

## Who it is for

- Health-tech, SaaS and BPO companies serving US healthcare
- Business associates processing protected health information
- Medical billing and coding providers

## Benefits

- A documented HIPAA risk analysis
- Safeguards that also map to ISO 27001 and SOC 2
- Confidence in business associate agreements

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Is there a HIPAA certification?

No official HIPAA certification exists. Organisations demonstrate compliance through risk analyses, policies and safeguards, often supported by an ISO 27001 certificate or SOC 2 report.

Related: https://securei3.com/standards/soc-2/, https://securei3.com/standards/iso-27001/, https://securei3.com/standards/iso-27701/

Contact: https://securei3.com/contact/: info@securei3.com