•  A HIPAA BAA must be in place for a regulated entity to use online tracking technologies to collect IIHI from its website, mobile apps, social media page(s) for health care operations purposes.
• OCR says all IIHI, including an individual’s IP addresses and geo location, collected by a regulated entity’s website, is protected by HIPAA.
• If

…