Telehealth Vendor HIPAA Review: Do it Right in 5 Steps
If a telehealth vendor touches ePHI, I treat the review like a HIPAA risk check before any patient data moves. Since the COVID-era OCR flexibility ended in May 2023, video, chat, recordings, mobile access, and admin settings all need the same HIPAA review you’d expect in an in-person setting. What to look for before approval: A signed BAA that matches the vendor’s actual data flow Sessio...
