--- title: TrueVault | Data Compliance Software for SMBs | Morgan Brown --- - [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa) - [GDPR Compliance](https://safe.truevault.com/gdpr-guide) - [HIPAA](https://safe.truevault.com/learn/hipaa) - [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-pii) - [PHI](https://safe.truevault.com/protected-health-information) - [Resources](https://safe.truevault.com/learn/) - Login [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) - [Resources](https://safe.truevault.com/learn/) - Login - Login - [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) - [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com) Blog - [Home](https://www.truevault.com/index.html) - [Blog](https://safe.truevault.com/blog) ## Morgan Brown ### Recent Posts ## [What is Protected Health Information?](https://safe.truevault.com/blog/protected-health-information.html) by Morgan Brown January 11, 2015 Protected Health Information, or PHI, is the personally identifiable health information that HIPAA regulates and protects. But HIPAA was written nearly 20 years ago for a mostly analog world of paper files and physical x-rays—the iPhone wasn't even a dream. In today's world of wearables, health apps, genetic sequencing and more, getting a precise definition of PHI can be confusing for developers trying to parse whether they need to be HIPAA compliant or not. [Read More](https://safe.truevault.com/blog/protected-health-information.html) ## [Top mHealth Apps for September](https://safe.truevault.com/blog/top-mhealth-apps-for-september-2014.html) by Morgan Brown October 20, 2014 Apps continue to grow in importance for smartphone users, as more people spend more time in apps and less time on the mobile web. With the recent launches of HealthKit, Apple Watch and more, health and wellness is no exception to the trend. September’s most in-demand mhealth and medical apps for iOS and Android offer everything from tracking medical information, getting or staying in shape, consulting with physicians, and even helping others. [Read More](https://safe.truevault.com/blog/top-mhealth-apps-for-september-2014.html) ## [Apple’s HealthKit vs. Google Fit \[Infographic\]](https://safe.truevault.com/blog/apple-healthkit-vs-google-fit-infographic.html) by Morgan Brown October 14, 2014 The field of mHealth has never been hotter as more people add wearables to their list of must-have devices. With the release of the iPhone 6 and HealthKit, Apple is now one of the largest digital health platforms in the world. It’s clear that we’re at the very beginning of a megatrend in personal health technology. Apple’s not the only one jumping on the mHealth bandwagon, however. Google released Google Fit and Android Wear, and Samsung threw their hat into the ring with SAMI (Samsung... [Read More](https://safe.truevault.com/blog/apple-healthkit-vs-google-fit-infographic.html) ## [What is HIPAA Compliant Hosting?](https://safe.truevault.com/blog/what-is-hipaa-hosting.html) by Morgan Brown October 6, 2014 According to security guidelines established by HIPAA (the Health Insurance Portability & Accountability Act), it’s not only covered entities—that’s those who provide treatment, payment, and operations in healthcare—but also their business associates—that’s anyone who develops mHealth, eHealth, or wearable applications that deal with Protected Health Information (PHI)—who are required to meet national standards for Physical, Administrative, and Technical security of health information. When it... [Read More](https://safe.truevault.com/blog/what-is-hipaa-hosting.html) ## [HIPAA Compliance Checklist \[Download\]](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) by Morgan Brown October 6, 2014 Establishing and maintaining HIPAA compliance for healthcare applications can be a time consuming and frustrating ordeal for developers. From the administrative safeguards that the business needs to implement, to the technical and physical safeguards that require software architecture and custom development, the process can add months to a development timeline and expensive technical debt that requires ongoing attention and refactoring. Unfortunately, using HIPAA-ready hosting like Amazon’s AWS... [Read More](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) ## [Introducing the TrueVault Partner Program](https://safe.truevault.com/blog/truevault-partner-program.html) by Morgan Brown August 26, 2014 Today we’re excited to introduce the TrueVault Developer Partner program. The Developer Partner program is designed to make it easier for application developers and agencies to work with TrueVault to build the next generation of healthcare applications for their clients. If you build mobile and web-based applications for hospitals, doctors or other healthcare providers, or if you’re an agency or development shop who specializes in building for the healthcare vertical, we want you to be a part... [Read More](https://safe.truevault.com/blog/truevault-partner-program.html) ## [5 Things CIOs Should Do in Light of the 4.5 Million Community Health Systems Patient Records Theft](https://safe.truevault.com/blog/cios-community-health-systems-patient-data-theft.html) by Morgan Brown August 19, 2014 Community Health Systems, which manages 206 hospitals in 29 states, reported this week that they were victims of Chinese hackers who infiltrated and stole more than 4.5 million patient records. The hackers made out with names, addresses and social security numbers for patients across the network during attacks in April and June. While the hackers did not get access to the highly-valued protected health information in patient medical records, the hack represents the second largest... [Read More](https://safe.truevault.com/blog/cios-community-health-systems-patient-data-theft.html) [![wearables-future](https://safe.truevault.com/hs-fs/hubfs/wearables-future.png?width=721&name=wearables-future.png)](https://safe.truevault.com/blog/whats-next-wearable-tech-health-data.html) ## [What’s Next for Wearable Technology and What it Means for Health Data](https://safe.truevault.com/blog/whats-next-wearable-tech-health-data.html) by Morgan Brown July 28, 2014 Wearable technology has rapidly moved from fantasy to geeky fad, and is now shaping up to become the next big wave after tablets. Many scoff at Google’s Glass but, judging from this year’s string of product and platform announcements at Consumer Electronics Show (CES) and from Apple, Google and Samsung, wearable technology is set to be the next major wave of consumer electronics. Indeed, research firm ABI predicts that by 2017 the market for wearables in the sports and health sectors will grow... [Read More](https://safe.truevault.com/blog/whats-next-wearable-tech-health-data.html) ## [Introducing the TrueVault Badge](https://safe.truevault.com/blog/introducing-truevault-badge.html) by Morgan Brown July 21, 2014 Today we're excited to announce the launch of the TrueVault Badge Program for applications that use our HIPAA compliant API and data store to keep user data compliant and secure. The TrueVault Badge Program allows any TrueVault customer who has signed a Business Associate Agreement with us to display the badge on their website to show their customers they care deeply about keeping protected health information safe and secure. Why a TrueVault Badge? [Read More](https://safe.truevault.com/blog/introducing-truevault-badge.html) ## [HIPAA Violations are on the Rise (Infographic)](https://safe.truevault.com/blog/hipaa-violations-on-rise.html) by Morgan Brown July 8, 2014 Over the past year, consumer complaints to the Office of Civil Rights regarding HIPAA violations has skyrocketed. The number of complaints rose nearly 10x between 2013 and 2003. While 2013 was a record year for complaints, 2014 is setting up to easily shatter the previous mark. Complaint volume is up 45.7% year-over-year through the month of May (the most recent month with data available). Enforcement of the new Omnibus Final Rule that was published in January of 2013 and effective as of... [Read More](https://safe.truevault.com/blog/hipaa-violations-on-rise.html) ## [Should App Developers Get HIPAA Certified?](https://safe.truevault.com/blog/should-app-developers-get-hipaa-certified.html) by Morgan Brown June 17, 2014 If you are a developer and you create apps, software, or other technologies that are connected to healthcare information, you are likely dealing with the question of HIPAA compliance and whether the laws around compliance apply to you and your app. One of the first things that probably come to mind is whether you need to get HIPAA certified. It’s a reasonable question. Especially if you’ve built applications that use sensitive data like payment information, you’re used to the notion of required... [Read More](https://safe.truevault.com/blog/should-app-developers-get-hipaa-certified.html) ## [Introducing the Developers Guide to HIPAA Compliance](https://safe.truevault.com/blog/introducing-the-developers-guide-to-hipaa-compliance.html) by Morgan Brown June 2, 2014 With the news today of Apple’s HealthKit and the Health app, we’re fairly certain that interest in mobile health (mHealth) applications is only going to rise. But building a healthcare-based application has particular challenges that other consumer applications don’t face—mainly the regulation and compliance with HIPAA, the Health Insurance Portability and Accessibility Act. The HIPAA Security Rule lays out the requirements for the privacy of user data, called protected health information (PHI)... [Read More](https://safe.truevault.com/blog/introducing-the-developers-guide-to-hipaa-compliance.html) ## [5 Pitfalls Mobile App Developers Face When it Comes to HIPAA Compliance](https://safe.truevault.com/blog/5-pitfalls-mobile-app-developers-face-when-it-comes-to-hipaa-compliance.html) by Morgan Brown May 27, 2014 The Health Insurance Portability and Accountability Act was signed into law by Bill Clinton on August 21st, 1996. To put this in its technological context, HIPAA predates the first iPhone by 10 years, the first iPad by nearly 14 years, and came into effect just 1 year after commercial ISPs started providing broader access to the consumer Internet. At this point in time, anything close to mobile apps was still beyond the imaginations of even the most outlandish sci fi writers. [Read More](https://safe.truevault.com/blog/5-pitfalls-mobile-app-developers-face-when-it-comes-to-hipaa-compliance.html) ## [Eight Things We Are Looking for From Apple’s Healthbook and iOS 8](https://safe.truevault.com/blog/eight-things-we-are-looking-for-from-apples-healthbook-and-ios-8.html) by Morgan Brown May 19, 2014 With the rise of popular wearables like the Nike Fuel band and Jawbone Up, and health-based applications for smartphones, personal health is shaping up to be the next major area of innovation for consumer device makers—smartphone manufacturers included. [Read More](https://safe.truevault.com/blog/eight-things-we-are-looking-for-from-apples-healthbook-and-ios-8.html) ## [What Developers Need to Know about HIPAA Compliance in Wearable Tech](https://safe.truevault.com/blog/what-developers-need-to-know-about-hipaa-compliance-in-wearable-tech.html) by Morgan Brown May 14, 2014 With dozens of products already on the market and more on the way, it’s clear that wearable tech is only going to grow in popularity with consumers. From Fitbit to Jawbone Up, Nike Fuel Band and more, these devices are tracking more consumer health data than ever. While popular wearables are tracking steps and calories today, it’s likely that they will track things like hydration, heart rate and more in the next few months—especially if rumors about Apple’s Healthbook are true. [Read More](https://safe.truevault.com/blog/what-developers-need-to-know-about-hipaa-compliance-in-wearable-tech.html) ## [Meet us at HxRefactored](https://safe.truevault.com/blog/meet-us-at-hxrefactored.html) by Morgan Brown May 8, 2014 TrueVault will be at HxRefactored in Brooklyn, New York on May 14-15. Our CEO Jason will be speaking on Wednesday in the HIPAA and Data Security for developers track. His talk, “Decoding HIPAA for Developers” is focused on helping application developers and hardware engineers understand the ins-and-outs of HIPAA compliance for mobile apps, wearable technology and more. If you’re building a new mobile or web app, or software for new wearable devices you’ll want to put this session on your... [Read More](https://safe.truevault.com/blog/meet-us-at-hxrefactored.html) ## [Need a Hand with TrueVault? AirPair Can Help!](https://safe.truevault.com/blog/need-a-hand-with-truevault-airpair-can-help.html) by Morgan Brown March 1, 2014 TrueVault is excited to participate in AirPair's premium support program, which allows our customers to work with trusted TrueVault experts on complex API integrations and similar engagements. Airpair gives developers instant access to the world's best software engineering experts via online screensharing and video chat. There are lots of places that let non-engineers hire engineers one-off for low quality projects like oDesk, but Airpair is one of the few and the best that let developers... [Read More](https://safe.truevault.com/blog/need-a-hand-with-truevault-airpair-can-help.html) ## [Here's How to Keep Your Mobile Data Secure](https://safe.truevault.com/blog/how-to-keep-mobile-data-secure.html) by Morgan Brown January 15, 2014 More than 4.4 million phones were stolen or lost in 2013, according to Consumer Reports. With 70.4% of missing phones the result of theft, there is a lot of personal data floating around in the wrong hands. So how can you keep your phone data safe? Follow these nine tips to keep your personal data safe and secure, even if your phone is stolen. Keeping Mobile Data Safe Set a lock screen password. [Read More](https://safe.truevault.com/blog/how-to-keep-mobile-data-secure.html) ## [What is the penalty for a HIPAA violation?](https://safe.truevault.com/blog/what-is-the-penalty-for-a-hipaa-violation.html) by Morgan Brown January 9, 2014 HIPAA violations are expensive. The penalties for noncompliance are based on the level of negligence and can range from $100 to $50,000 per violation (or per record), with a maximum penalty of $1.5 million per year for violations of an identical provision. Violations can also carry criminal charges that can result in jail time. Fines will increase with the number of patients and the amount of neglect. Starting with a breach where you didn’t know and, by exercising reasonable diligence, would... [Read More](https://safe.truevault.com/blog/what-is-the-penalty-for-a-hipaa-violation.html) [All posts](https://safe.truevault.com/blog/all) ### Latest Posts ## [Should Utah's Privacy Law Be on Your Radar?](https://safe.truevault.com/blog/utah-privacy-law-does-it-apply) Phillip Walters / November 17, 2022 ## [Connecticut’s Privacy Law: Does It Apply to Your Business?](https://safe.truevault.com/blog/connecticut-privacy-law-does-it-apply) Phillip Walters / November 10, 2022 ## [Global Privacy Control: A New Requirement for Compliance](https://safe.truevault.com/blog/global-privacy-control) Phillip Walters / November 7, 2022 ## [A Cookie Banner Isn't Enough for CCPA Compliance](https://safe.truevault.com/blog/a-cookie-banner-isnt-enough) Phillip Walters / October 27, 2022 ## [Why CCPA Compliance Matters to HR](https://safe.truevault.com/blog/why-ccpa-matters-to-hr) Phillip Walters / October 21, 2022 ### Mailing List ### Company - [Blog](https://safe.truevault.com/blog) - [Contact Us](https://safe.truevault.com/contact-us-2019) - [Careers](https://truevault.workable.com) - [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/) ### Developers - [Patterns](https://safe.truevault.com/patterns) - [Documentation](https://docs.truevault.com/) - [Quick Start Guide](https://safe.truevault.com/quick-start-guide) - [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure) - [API Overview](https://safe.truevault.com/api-overview) ### Latest Posts ### Contact Us 201 Mission Street, 12th Floor San Francisco, CA 94105 Email: [hello@truevault.com](mailto:hello@truevault.com) 2024 © All Rights Reserved.  [Privacy Policy](https://privacy.truevault.com/privacy-policy)  |  [Terms of Use](https://www.truevault.com/legal/truevault-terms-of-use)  |  [Supplemental Terms](https://www.truevault.com/legal/truevault-supplemental-terms-of-use) | [California Privacy Notice](https://privacy.truevault.com/privacy-policy#california-privacy-notice)