Microsoft Teams
Can Healthcare Teams Use Microsoft Teams for PHI?
What healthcare teams should verify before using Microsoft Teams for PHI, including Microsoft's BAA terms, in-scope services, and collaboration workflow caveats.
Short answer
Microsoft says it offers a HIPAA BAA for in-scope Microsoft services, and its HIPAA materials list Microsoft Teams among applicable Office 365 services. The harder question is how your organization will govern chat, files, meetings, and retention in practice.
Where Teams workflows get risky
Teams risk usually appears in:
- chat channels used as workflow systems
- uncontrolled file sharing
- meeting recordings and transcripts
- broad group membership
Related pages
Use PHI in Text Messaging, Best HIPAA-Compliant Collaboration Tools, and the vendor BAA tracker if Teams is one layer in a bigger collaboration environment.
Sources
- HIPAA & HITECH Act - Microsoft Compliance | Microsoft
- Microsoft HIPAA Business Associate Agreement | Microsoft
- Business Associates | HHS