We wanna share Patient Info (PHI) on JIRA logged issues, does JIRA HIPPA compliant?

[ozmursleen]

Can we share patient info (PHI) on JIRA logged issues, does JIRA follows HIPPA rules?

[Paul Larrieu]

There are 3rd party options in the Atlassian Marketplace that help with this use case. Here is one that may work for you: 'DLP for Jira'.

[Alex Kaufman [Enhancera]]

Our recently published PII Protector for JIRA add-on can help here. It monitors sensitive PII like credit card numbers, social security numbers, addresses, etc. stored in Atlassian JIRA, reports it, provides admins with a convenient UI to manage it, to audit access to it, and optionally to hide or to erase it.

PII Protector for JIRA is aimed to be a complete solution for PII in the organization JIRA instance.

[Chana OLeary]

Yes, but PII is not PHI. PHI encompasses far more detailed data than just social security  numbers and addresses. There are patient names, diagnoses, lab reports, case management notes, provider notes, medication records, historical medical records and on and on.

[Joe Pitt]

Based on what I know about PII and PHI rules, no it doesn't out of the box. You would need field level security. The Behaviors plugin MAY give you what you need.