HIPAA Business Associate Amendment for Google Workspace Customers - The Complete Guide

Quick and easy-to-follow guide for Google Workspace administrators

What is HIPAA

Under HIPAA (the Health Insurance Portability and Accountability Act), certain information about a person’s health or health care services is classified as Protected Health Information (PHI).

Which Google Workspace services are compatible with HIPAA

Google offers a Business Associate Amendment that makes the following services HIPAA-compliant:

  • Gmail
  • Google Calendar
  • Google Drive (as well as Docs, Sheets, Slides, and Forms)
  • Google Hangouts (chat messaging feature only)
  • Google Chat
  • Google Meet
  • Google Keep
  • Google Cloud Search
  • Google Sites
  • Google Groups
  • Google Tasks
  • Google Voice (managed users)
  • Jamboard, Google Vault services
  • Google Cloud Identity

When you need to be HIPAA compliant

  • You need to know whether your company is subject to HIPAA requirements and whether you will use Google services in connection with PHI. If your organization handles health information, check with a legal professional.
  • If you have not signed the BAA as shown below, you must not use these Google services in connection with PHI.

HIPAA implementation guidelines

You may also wish to review Google’s HIPAA Implementation Guide at https://services.google.com/fh/files/misc/gsuite_cloud_identity_hipaa_implementation_guide.pdf.

How to accept the business associate agreement for HIPAA compliance in Google Workspace step-by-step with images

Follow the steps below to review and accept the BAA in order to ensure HIPAA compliance.

Step 1

HIPAA Business Associate Amendment For Google Workspace Customers - Step 1

Go to the Admin console https://admin.google.com and click Account settings.

Step 2

HIPAA Business Associate Amendment For Google Workspace Customers - Step 2

Select Legal and compliance.

Step 3

HIPAA Business Associate Amendment For Google Workspace Customers - Step 3

Click Security and Privacy Additional Terms.

Under Google Workspace/Cloud Identity HIPAA Business Associate Amendment, click REVIEW AND ACCEPT.

That's all! You reached the end of the article. Continue to:

If you find this useful, share and help others!


Data Processing Amendment (GDPR)

If the GDPR applies to Google’s processing of your data, it requires your contract with Google to contain specific data processing terms. Unless you accept the DPA 2.1 (or a later version), your contract will lack those terms.

Improve Google Workspace
Get the best out of Google Workspace
Add essential functionality such as backup and increased security, get new awesome features, and optimize your work with these additional services for Google Workspace.
Website Tools and Resources
Resources for website creators
Awesome tools and services for easy and effective site building, content creation, SEO, email marketing, and more.

Submit Feedback

Think we could do something better or just want to tell us how happy you are with the site? We would love to hear from you – your feedback is more valuable than you can imagine.

Fill out this form, and we will get back to you.

Report An Issue With Workspace123

Are you running into an issue with the site? Maybe you found a broken link, or something else is wrong?

Fill out this form to let us know, and we will address it as soon as possible.

Please make sure to be very specific and add as many details as possible.

Missing Content

Our goal is to run the number one site in the world for you to get help with and learn how to use Google Workspace. This can’t be so if there is any missing information.

If you believe we need to add something, fill out this form, and we will do our best to add any missing content as soon as possible.

This site uses cookies to ensure you get the best experience. Click here to see our Cookies Policy.

Be the first to know

You can stay on top of news and updates in Google Workspace and Workspace123 and get special offers by subscribing to our newsletter.

Subscribe by email for news and updates