What is a HIPAA?

HIPAA covers protected health information, which is health data that can be tied to a specific person. It requires administrative, physical and technical safeguards: access controls, encryption, audit trails, staff training and breach notification. Vendors that handle this information on a provider's behalf are business associates and are bound by the same expectations through a written agreement.

For a clinic, the sensible operating rule with any website tool is to minimise what you collect. A booking request needs a name, a way to contact the person, and enough context to book the right appointment. It does not need a description of symptoms, a medical history, or test results. Keeping clinical detail out of web channels reduces both risk and the amount of governance you have to do.

Clerkzo is HIPAA assessed, and the way clinics use it reinforces that principle. The widget answers logistics questions such as services, hours, pricing and insurance, hands anything clinical to a human, and captures the booking request with the fields you choose. That combination keeps the front door open without turning a chat window into a medical record.