UD Zoom HIPAA
All UD Zoom Pro licenses are now HIPAA Compliant and satisfy the requirements for HIPAA online security.
Users hosting Zoom meetings that include discussions of HIPAA-protected data should join the HIPAA group as soon as possible. Joining the HIPAA group will not alter any scheduled meetings in your account and includes most Zoom functions, including:
- Saving a copy of text chats
- Adding anyone at UD as an alternative host to meetings
- Adding live closed captions to meetings and saving transcripts
- AI summaries to the host account
- Local recording to the host machine
How do I join the HIPAA Zoom group?
To join the new HIPAA group:
- Navigate to this service request page.
- Click the “Request Service” button on the right side of the page.
**A new page opens with the Zoom HIPAA Protocol Request form. - Select the radio button next to “Enroll into Zoom HIPAA Protocol group.”
- At the bottom of the form, click “Submit” to be added to the group.
Note: You can also leave the group at any time by selecting “Leave Zoom HIPAA Protocol group” and re-submitting the form.
Going forward, you will need to log in to Zoom on all devices using one of the standard UD methods.
Note: It may take up to 24 hours for the change to complete. We recommend not recording to the cloud during that time.
Important: Please be sure not to record sensitive information to the Zoom cloud until the change has occurred.
Zoom HIPAA user responsibilities
While all Zoom meetings are now HIPAA compliant, recordings to the cloud still do not meet HIPAA protocols. Therefore, it is CRITICAL that you are HIPAA compliant in your use of Zoom as indicated below.
- Zoom meetings with patients, study participants, or where any HIPAA data is shared may not be recorded to the Zoom Cloud. This function is therefore not available to HIPAA users.
- Recordings with HIPAA data should be made only to a local machine and shared only through encrypted channels to appropriate people.
- Copies of text chats, audio transcripts, and AI summaries may not be shared online except through encrypted channels to appropriate people.
- The MyMedia repository in Canvas/UDCapture is not encrypted appropriately for HIPAA data and cannot be used to store recorded materials containing HIPAA information. All meetings containing HIPAA data must be recorded on the user’s local machine.
- Class recordings made in a UD Capture +Zoom-enabled classroom will be manually uploaded to your MyMedia repository by UDIT staff.
For more information or assistance with your Zoom account, contact zoom-support@udel.edu.