I was talking to somebody over the weekend regarding a site that seemed a perfect match for CiviCRM -- including donations, event registration, contact/relationships, case management. When I mentioned that CiviCRM handled all of these things, their first response was that the case management features would need to be HIPAA compliant.

Has anyone used CiviCRM in a HIPAA context? If so, can you detail any special set up considerations and requirements that are needed?

1 Answer 1


Mostly. See




The part about who views records wasn't implemented from within CiviCRM, but depending on the definition of "your personal records" in your context it could just mean page hit tracking from within drupal, since it records the logged in user.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.