--- title: Do I need to be HIPAA compliant? - TrueVault description: A guide with everything you need to know about HIPAA compliance as it relates to your application and what steps you need to take to be sure you don't violate the law. Learn more by reading the HIPAA guide. --- - [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa) - [GDPR Compliance](https://safe.truevault.com/gdpr-guide) - [Personal Data](https://safe.truevault.com/learn/what-is-personal-data) - [DSAR](https://safe.truevault.com/learn/explaining-gdpr-data-subject-requests) - [HIPAA](https://safe.truevault.com/learn/hipaa) - [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-phi) - [PHI](https://safe.truevault.com/protected-health-information) - [Resources](https://safe.truevault.com/learn/) - [Resource Center](https://safe.truevault.com/learn/) - [TrueVault Safe](https://safe.truevault.com/help/truevault-safe) - [About](https://safe.truevault.com/about-us) - [Contact](https://safe.truevault.com/contact-us) - [Careers](https://careers.truevault.com/) - Solutions - [GDPR Compliance](https://safe.truevault.com/solutions/gdpr-compliance) - [HIPAA Compliance](https://safe.truevault.com/hipaa-compliance) - [For Applications](https://safe.truevault.com/solutions/application-compliance) - [For Data Exchanges](https://safe.truevault.com/solutions/data-exchange-compliance) - [Developers](https://safe.truevault.com/resources/index) - [Pricing](https://safe.truevault.com/safe-pricing) - [Blog](https://safe.truevault.com/blog) - [Login](https://console.truevault.com/login) - [Get Started](https://safe.truevault.com/get-started) # Chapter 3: Do I Need to be HIPAA compliant? This is the most important question you can ask, because [HIPAA violations](https://www.truevault.com/blog/what-is-the-penalty-for-a-hipaa-violation.html?hsLang=en) can result in some serious penalties. **If you handle, store or transmit [protected health information](https://www.truevault.com/protected-health-information?hsLang=en) (PHI) to or from a covered entity then you need to be [HIPAA compliant](https://safe.truevault.com/solutions/hipaa?hsLang=en).** If you skipped straight here and don't know what PHI is, read this [part of the guide](https://safe.truevault.com/learn/what-is-hipaa?hsLang=en). ## Who needs to be HIPAA compliant? The short answer is that the HIPAA rules apply to both [Covered Entities](https://www.truevault.com/resources/compliance/what-is-a-covered-entity?hsLang=en) and their [Business Associates](https://www.truevault.com/resources/compliance/what-is-a-business-associate?hsLang=en). [HHS.gov](http://hhs.gov/) In [chapter 2](https://safe.truevault.com/learn/what-is-hipaa?hsLang=en), we explain the role of covered entities and business associates. Learn more about HIPAA by reading our [resources](https://safe.truevault.com/learn/hipaa?hsLang=en).  [![Get The HIPAA Compliant Checklist](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/4693513/e7f4b6db-52ca-46a0-bd1e-cb24ace89926.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/4693513/e7f4b6db-52ca-46a0-bd1e-cb24ace89926) ## Navigation [Chapter 2: What is HIPAA?](https://safe.truevault.com/learn/what-is-hipaa?hsLang=en) | [Chapter 4: HIPAA Security Rule](https://safe.truevault.com/learn/the-hipaa-security-rule?hsLang=en) ### **Disclaimer** ### *This article is provided for general informational purposes only and is not intended to be legal advice.  By using the article, you agree that the information on this article does not constitute legal or other professional advice. The article is not a substitute for obtaining legal advice from a qualified attorney licensed in your state. The information on the article may be changed without notice and is not guaranteed to be complete, correct or up-to-date, and may not reflect the most current legal developments.* ### Table of Contents - Chapter 1: [Introduction to HIPAA Compliance](https://safe.truevault.com/learn/introduction-to-hipaa-compliance?hsLang=en) - Chapter 2: [What is HIPAA?](https://safe.truevault.com/learn/what-is-hipaa?hsLang=en) - Chapter 3: [Do I need to be HIPAA Compliant?](https://safe.truevault.com/learn/do-i-need-to-be-hipaa-compliant?hsLang=en) - Chapter 4: [HIPAA Security Rule](https://safe.truevault.com/learn/the-hipaa-security-rule?hsLang=en) - Chapter 5: [Becoming HIPAA Compliant](https://safe.truevault.com/learn/becoming-hipaa-compliant?hsLang=en) - Chapter 6: [Who Certifies HIPAA Compliance?](https://safe.truevault.com/learn/who-certifies-hipaa-compliance?hsLang=en) - Chapter 7: [HIPAA Fines](https://safe.truevault.com/learn/hipaa-fines?hsLang=en) - Chapter 8: [Developer Considerations](https://safe.truevault.com/learn/developer-considerations?hsLang=en) - Chapter 9: [Mobile Applications and HIPAA Compliance](https://safe.truevault.com/learn/mobile-applications-and-hipaa-compliance?hsLang=en) - Chapter 10: [Wearable Applications and HIPAA Compliance](https://safe.truevault.com/learn/wearable-applications-and-hipaa-compliance?hsLang=en) - Chapter 11:[ Apple Healthkit](https://safe.truevault.com/learn/apple-healthkit?hsLang=en) ### Latest Posts ## [Should Utah's Privacy Law Be on Your Radar?](https://safe.truevault.com/blog/utah-privacy-law-does-it-apply?hsLang=en) Phillip Walters / November 17, 2022 ## [Connecticut’s Privacy Law: Does It Apply to Your Business?](https://safe.truevault.com/blog/connecticut-privacy-law-does-it-apply?hsLang=en) Phillip Walters / November 10, 2022 ## [Global Privacy Control: A New Requirement for Compliance](https://safe.truevault.com/blog/global-privacy-control?hsLang=en) Phillip Walters / November 7, 2022 ### Blog Subscription ### Company - [Blog](https://safe.truevault.com/blog) - [Contact Us](https://safe.truevault.com/contact-us-2019) - [Careers](https://truevault.workable.com) - [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/) ### Developers - [Patterns](https://safe.truevault.com/patterns) - [Documentation](https://docs.truevault.com/) - [Quick Start Guide](https://safe.truevault.com/quick-start-guide) - [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure) - [API Overview](https://safe.truevault.com/api-overview) ### Latest Posts ### Contact Us 201 Mission Street, 12th Floor San Francisco, CA 94105 Email: [hello@truevault.com](mailto:hello@truevault.com) 2021 © All Rights Reserved. [Privacy Policy](https://privacy.truevault.com/privacy-policy) | [Terms of Service](https://safe.truevault.com/terms-of-service?hsLang=en) - - -