Before working with any entity that will be managing and/or storing PHI on your behalf (known under HIPAA as a business associate), you must first sign a business associate agreement or BAA.

Sign and execute a business associate agreement with Dropbox.

Below we list some of the most important steps you should take: As is the case with most applications, it has to be configured properly before it can be used by a HIPAA- covered entity.

While Dropbox can be used by healthcare organizations, it’s not HIPAA compliant out of the box. How should healthcare organizations use Dropbox? Business accounts allow for more granular permissions and access settings that will be important in your compliance efforts. Keep in mind that compliance is only possible on Dropbox for business and not for Dropbox personal accounts. How secure is Dropbox?ĭropbox is a secure product, and the company has received a number of industry specific security certifications, including:ĭropbox is also capable of supporting an organization’s compliance efforts with a variety of compliance regimes including: Even in a post- Google Drive and OneDrive era, Dropbox remains important, as not everyone uses the same productivity suites. With files being managed and synced to a central location, teams can work together without issues of version control. For over a decade, Dropbox has allowed teams to collaborate cross- functionally by providing a single source of truth. Dropbox is known for being a convenient file sharing and storage tool.

Dropbox business hipaa