HIPAA Compliance in Mixed Jira Instance

[Andrew L_ Chlup]

Hello Everybody,

We are preparing to launch a new Electronic Health Record system and need a HIPAA-compliant service desk.

We currently use Jira Service Desk for IT, HR, Communications, and Facilities, so staying with Jira seems like a no-brainer.

It is unclear whether we can tag certain sites with a PHI tag or if it is product-wide. If it is product-wide setting, then I think we'd need a separate instance for HIPAA-related items.

What are your thoughts or experiences?

[Dan Breyen]

Hi Andrew, I found some information from Atlassian regarding HIPAA.  

HIPAA 

understand-hipaa-compliance-for-atlassian-products/ 

I know they refer to tagging products and other steps.  I'd check out these articles.

Hope that helps.