


(If you’re wondering how this constitutes PHI, please see our CE for OH course, included in membership, How to Identify HIPAA Protected Health Information: Finding Your Clients’ Sensitive Information Wherever It Goes.)įor HIPAA covered entities, the deal breaker is that the company won’t execute a Business Associate Agreement (BAA.) Friendly reminder: if a third party qualifies as a Business Associate under HIPAA then a Business Associate Agreement is required, and informed consent does not and can not absolve that requirement. While Boomerang is a great tool for helping you achieve and maintain that coveted “inbox zero” status, and not forgetting to follow up on something important, it is not something that can be used as an add-on for your email accounts that touch or handle Protected Health Information (PHI.) If you use Boomerang they have access to your email account and its contents, and using the Boomerang services means they’re handling identifiers such as the recipient’s email address, IP address, and the content of the recipient’s response. The software allows users to schedule sending of emails, snooze messages, pause their inbox, get reminders about an email if it hasn’t been replied to, and get read receipts. What Is This Product?īoomerang is email productivity software that currently has products of the same name for Gmail, Outlook and Android. Recommend for your HIPAA risk management needs?: No.
