If you do any work associated with websites or marketing in the healthcare industry, you’ve likely heard about the bulletin released in December 2022 by the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS), which addressed the use of tracking technologies on websites that require HIPAA compliance.
This new guidance makes it clear that using healthcare marketing tracking technologies (such as Google Analytics or the Meta Pixel) on a healthcare website constitutes a HIPAA violation due to their collection of protected health information (PHI).
This has caused a good deal of chaos for healthcare entities trying to collect data in a HIPAA-compliant way, as some methods previously thought to be acceptable would be in violation under this interpretation. It’s left many marketers and website owners confused and wondering: Is there such a thing as