-
HIPAA violations and fines: What healthcare organizations need to know
Quick summary HIPAA violations happen when a covered entity or business associate fails to meet the HIPAA Privacy, Security or Breach Notification Rule. Civil penalties range from a few hundred dollars to more than $2 million per violation, set across four tiers based on how much the organization knew. What this guide covers: HIPAA violation…
-
We checked 59 hospital websites. 73% kept tracking visitors after opt-out.
A new study by Piwik PRO and Verified Data scanned 59 major US hospital and clinic websites for tracking and data compliance. The findings show just how common it is for major US healthcare websites to run marketing tools that weren’t built for a regulated environment. What we actually found Across the 59 scanned sites,…
-
Is Google Analytics HIPAA-compliant?
If you use Google Analytics or similar software, you’re likely already optimizing your website to serve your customers better. But what about Google Analytics and HIPAA compliance? In short – if you’re a HIPAA-covered entity, using GA4 puts you at serious risk of a HIPAA breach. Google states that Google Analytics doesn’t satisfy HIPAA requirements. And…
-
HIPAA-compliant marketing and advertising: What you can and can’t do
Healthcare marketing and advertising under HIPAA aren’t off limits, but the rules are specific and the major ad platforms won’t sign a BAA. Here’s what needs patient authorization, what doesn’t, and how to run HIPAA-compliant campaigns without exposing PHI.
-
PHI vs PII in HIPAA: Healthcare marketing compliance guide
Personally identifiable information (PII) and protected health information (PHI) may seem similar. However, there are critical distinctions between the two. While PII is a catch-all term for any information that can be associated with an individual, PHI applies specifically to HIPAA-covered entities dealing with identifiable patient information. Keeping HIPAA compliant and protecting patient information requires…
-
A review of HIPAA-compliant analytics platforms
As a healthcare organization subject to HIPAA, you’re walking a fine line when trying to improve the patient experience and ensure your activities are HIPAA-compliant. Vendors have been adjusting to the shifting privacy-oriented analytics landscape and their clients’ expectations. Many of them change their offers accordingly. At the same time, the dominant analytics vendors are…
-
The comparison of 9 platforms supporting HIPAA-compliant analytics
Quick summary Nine platforms, three categories. Web and digital analytics (Piwik PRO, Matomo, Piano Analytics, Adobe CJA) report on site and app use. Product analytics (Mixpanel, Amplitude, Heap) analyze in-product behavior. Data governance and routing (Freshpaint, Tealium) control what reaches your existing tools but don’t report themselves. Most vendors restrict the BAA to paid or…
Piwik PRO blog
Where digital marketing professionals find advice on how to collect and analyze data in a privacy-friendly way.
The comparison of 9 platforms supporting HIPAA-compliant analytics
Compare Piwik PRO, Matomo, Piano Analytics, Adobe CJA, Mixpanel, Amplitude, Heap, Freshpaint and Tealium across three categories: web and digital analytics, product analytics, and data governance and routing. See which sign a BAA, on which plan, and what each one can actually report on.
Newsletter
Sign up to receive the latest Piwik PRO news and insights in your inbox.