HIPPA Compliant Email Notifications for Jira Cloud

[Megan Koski]

We are a HIPAA Compliant Jira Cloud user.  We have found that the Email Notifications via Jira Cloud are not super useful as they are restricted so much.

We've put in a Feature Request to add, at least, the Issue Summary into the Subject Line and the Body of the email so recipients know what issue is being updated, mentioned, etc. without having to click a link from the email.

Help us get this Feature approved by voting on it:

https://jira.atlassian.com/browse/JRACLOUD-84269

This might be a good forum to propose any other improvements to Email Notifications for HIPAA Compliant companies.  We think this is just a start!

[Igor Medeiros - Modus Create]

Hi @Megan Koski

Adding to what Brant sent, Automation for Jira gets you part of the way. Create a rule with a Send email action, then place {{issue.key}} {{issue.summary}} directly in the Subject and Body fields. Smart values render the summary inline, so recipients see context without clicking through.

For a drag-and-drop template editor with full control over subject lines and per-project layouts, our app Notification Assistant for Jira does this without maintaining rules.

Feel free to reach out if you'd like to learn more.

[Megan Koski]

Very cool, thank you!

[Brant Schroeder]

@Megan Koski What if the summary includes HIPPA information in it how would Atlassian know.  If this is something you would like to do you could always use automation to send out a notification that meets your needs.

[Megan Koski]

@Brant Schroeder Sure, understandable concern on Atlassian's part.

As HIPPA Compliant Jira Cloud users, I would think we could agree to a term / check a box that says we won't put PHI into Issue Summaries.  If we do, it's on us.  We've been using Jira for years now and Issue Summaries is not a place for PHI, at least in our business.  Similar to a lot of other HIPPA compliance efforts, we can train staff not to put PHI in Issue Summaries similar to training staff not to email PHI.

I do understand that Atlassian cannot control everything every user does.

Can you share information on said automation you speak of?  Ultimately, we want the Email Notifications that Jira sends but with the Issue Summary so we know what the Email Notification is referencing.  All of our users end up deleting or setting a rule to delete Jira Email Notifications because the notification itself gives little to no context.

[Brant Schroeder]

@Megan Koski There is not a specific delivered automation, you would have to create it.  You could have an email sent on creation or some other trigger. The automation can send an email.  Check out the automation template library and automation playground.