HIPAA covers protected health information: health data that can be tied to one person. The law says this data must be kept safe. That means access controls, encryption, audit trails, staff training, and telling people if there is a breach. Vendors that handle this data for a provider are called business associates. They must sign a written agreement and follow the same rules.
For a clinic, the safe rule for any website tool is simple: collect less. A booking request needs a name, a way to reach the person, and enough detail to book the right visit. It does not need symptoms, medical history, or test results. Keeping clinical details out of web chat lowers the risk and cuts the paperwork.
Clerkzo is HIPAA assessed, and the way clinics use it follows the same rule. The widget answers practical questions like services, hours, pricing and insurance. It hands anything clinical to a human, and it captures the booking request with only the fields you choose. The chat window stays a front door, not a medical record.
Related guides
- Is customer data safe with an AI chatbot?
- How clinics handle insurance questions online without getting it wrong
Also see: AI chat for dental practices
Related terms
Browse all 104 terms- SOC 2SOC 2 is an independent examination of how a company protects customer data. An accredited auditor checks the company's controls against criteria that cover security, availability, processing integrity, confidentiality and privacy.
- Personally Identifiable Information (PII)Personally identifiable information (PII) is any data that can identify a specific individual on its own or when combined with other information — names, email addresses, phone numbers, account identifiers and more.
- Data RetentionData retention is the policy and practice of deciding how long you keep each type of data before deleting it, based on how long you actually need it and what the law requires or permits.
- Data ResidencyData residency refers to the country or region where an organisation's data is physically stored, and to any requirement that it stay within a particular jurisdiction.