HIPAA and Zoom

Introduction

There are two Zoom account types at the SCSU:

SCSU: This is the account type for all SCSU Zoom users who are not expected to interact with Protected Health Information (PHI) in Zoom. 

HCC: This acronym stands for Health Care Component and is the account type for all users who have a Business Associates agreement (BAA) and may interact with Protected Health Information (PHI). This includes all users who have either a BAA or BAA+ flag associated with their account

It is still important for individuals using the service to follow best practices for privacy as the tool can’t safeguard everything.  Here is Zoom’s documentation about how you help safeguard HIPAA data.

Question

1.  How do I know if I need a HIPAA Zoom account?

2.  How do I request a HIPAA Zoom account if needed?

3.  How do I sign onto the HIPAA Zoom account?

Answer

1. How do I know if I need an account?
   1.  Those with a Business Associates agreement (BAA) and the need to interact with Protected Health Information (PHI). This includes those with either a BAA or BAA+ flag associated with their SCSU account
2. How do I request a HIPAA Zoom account?
   1. Submit a ticket to huskytech@stcloudstate.edu with the following details:
   2. Subject: HIPAA Zoom account request
   3. Include your StarID in the request
   4. ITS will then submit a request to our MinnState system to have an account created for you
3. How do I sign into Zoom with this account?
   1. Open a web browser and navigate to the HIPAA instance of Zoom: https://minnstate-health.zoom.us/ 
   2. Username:  Your StarID
   3. Password: Your StarID password

**Being part of a Zoom sub-account may limit certain functionalities, such as being assigned as an alternative host, joining sessions with account-specific restrictions, and accessing the general Zoom directory. Additionally, Zoom Phone services are not available in the HIPAA sub-account.