Can I create a new Outlook account that is HIPPA compliant?

Hi Lauren, great question. Outlook by itself isn’t automatically HIPAA compliant, but Microsoft 365 can be configured to meet HIPAA requirements. The key is that compliance depends on the plan and settings, not just creating a new email address. You’ll need a Microsoft 365 Business or Enterprise plan that includes security and compliance features, and you must sign a Business Associate Agreement (BAA) with Microsoft. After that, you’ll want to enable encryption, multi-factor authentication, and data loss prevention policies to protect PHI.

Can you confirm if you already have a Microsoft 365 subscription for the new business or if you’re starting from scratch?

Best,

Rez

To create a new Outlook 365 email account that is HIPAA compliant, you will need to ensure that you are using a Microsoft 365 plan that is specifically designed for compliance with HIPAA regulations. Microsoft 365 offers various plans that can be configured to meet HIPAA requirements, such as the Microsoft 365 Business plans or Enterprise plans that include appropriate security and compliance features.

Here are the steps you can follow:

1. Choose the Right Plan: Select a Microsoft 365 plan that offers HIPAA compliance. Plans like Microsoft 365 Business Premium or Enterprise E3/E5 are typically suitable.
2. Sign a Business Associate Agreement (BAA): Microsoft requires customers to sign a BAA to ensure compliance with HIPAA. This agreement outlines how Microsoft will handle protected health information (PHI).
3. Set Up Your Account: Once you have selected your plan and signed the BAA, you can create your new Outlook account through the Microsoft 365 admin center.
4. Configure Security Settings: Ensure that you configure the necessary security settings to protect PHI, such as enabling encryption, setting up multi-factor authentication, and managing user permissions.
5. Train Your Staff: Make sure that anyone who will be using the account is trained on HIPAA compliance and understands how to handle PHI securely.

By following these steps, you can create an Outlook account that meets HIPAA compliance requirements for your new business.