Child Item

How to make sure I have the right plan in order to be HIPAA compliant?

Hello - I have been using Dropbox for decades. My subscription is the $119 per year 2T plan. I am a psychotherapist and have been under the impression that my storage is HIPAA compliant and secured. However, now I am concerned that I misunderstood and that I have to upgrade my plan in order to ensure that it is secured. Please advise me on what to do to make sure I am in compliance.

Find more posts tagged with

Security

Disagree

Comments

Rich

@cpizzulli wrote:
My subscription is the $119 per year 2T plan. I ... have been under the impression that my storage is HIPAA compliant and secured.

Individual and Family plans (Basic, Plus, Family, Professional, Essentials) are not HIPAA compliant. Only the Business team accounts are HIPAA compliant.

cpizzulli

Ok so if I just upgrade to the business essentials plan I will be compliant?

Megan

Hey @cpizzulli, I hope you're doing well!

Are you referring to simply being HIPAA compliant, or about BAAs too?

I'm asking because Dropbox supports HIPAA compliance and signs Business Associate Agreements (BAAs) with Dropbox team customers who require them as part of their HIPAA/HITECH obligations.

To help you understand how we’re meeting our responsibilities under HIPAA/HITECH, you can request a mapping of our internal practices and recommendations for customers who are looking to meet the requirements of the HIPAA/HITECH Security and Privacy Rules with Dropbox team.

You may also want to take a look at our “Getting Started with HIPAA” guide, which has tips for configuring your account once you’ve signed a BAA with Dropbox.

If you're looking for something different, please let me know!

cpizzulli

Hello, Megan - I am inquiring about both - I will need a signed BAA. But as you can see from the first reply to my question, I am concerned also that my individual plan is not secure. Please clarify.

Rich

@cpizzulli wrote:
I will need a signed BAA. But as you can see from the first reply to my question, I am concerned also that my individual plan is not secure. Please clarify.

You'll need to be on a Business team account in order to get a signed BAA. Your current individual plan is not HIPAA compliant.

https://help.dropbox.com/account-settings/business-associate-agreement

cpizzulli

Thanks so much. I will upgrade my plan.

cpizzulli

Actually - I'm confused. I need a 'Team' account? What if I am a solo business? I can't use the 'Essentials for Business'?

Rich

@cpizzulli wrote:
I need a 'Team' account? What if I am a solo business? I can't use the 'Essentials for Business'?

The Essentials plan, which is an individual plan, doesn't include the option to enable HIPAA compliance. Only the team accounts have this option, and team accounts require a minimum of three licenses.

cpizzulli

So what do I do if I don't have any additional 'team members'? Am I not elligible?

Rich

@cpizzulli wrote:
So what do I do if I don't have any additional 'team members'? Am I not elligible?

You can still subscribe to a Business team account as an individual, but you'll have to buy three licenses.

cpizzulli

So if I understand this, I will have to pay $60 per month?

Jay

Hi @cpizzulli, that is correct (though the price may vary depending on your region and taxation), only Dropbox Business teams are eligible for HIPAA compliance, so you'd need to purchase 3 licenses at least in order to have a Dropbox Business team.

cpizzulli

Wow this is very disappointing. After all the years I have used it now I'll need to find another option. No way I'm spending 60 bucks per month just for my own storage.