What does the guidance say?
Good news for healthcare marketers already using Freshpaint to balance HIPAA compliance and high-performance marketing: HHS says you chose the right solution.
Earlier this week, HHS updated its guidance on the use of online tracking technologies and said CDPs are the right tool to use when you can't get a BAA with a tracking technology vendor.
Boom.
How about that? That's maybe the clearest statement we've ever heard from any government agency.
But here's the thing, a generic CDP might help with HIPAA compliance...but it requires a lot of technical engineering work to stand up and maintain.
Instead, most healthcare organizations, like Baptist Health and vybe urgent care, have agreed that they're better off with a Healthcare Privacy Platform *coughFreshpaintcough*. These platforms have a host of healthcare-specific features, including CDP functionality, built in.
That wasn’t the only thing HHS said in their updated guidance, but it was one of the most important things. They also said unauthenticated pages could risk HIPAA compliance, consent managers do not replace written HIPAA authorization, and IP addresses are not PHI by themselves on unauthenticated web pages.
This update answered five of the biggest questions that healthcare organizations have had since the original guidance was released in December ‘22.
Click through for a full breakdown of the updated guidance: HHS Approves Tools Like Freshpaint In Latest Guidance Update
