Looking for a Business Associate Agreement? Download our FREE starter template.
Total HIPAA Logo

How to establish a BAA with Google

If your organization stores, manages, or processes protected health information (PHI) using Google services, it’s critical that you have a Business Associate Agreement (BAA) with Google. A BAA is a legally binding contract that outlines the responsibilities and obligations of both parties with regard to the handling and protection of PHI. Google offers BAAs for its HIPAA-compliant products and services, including Google Workspace (formerly G Suite), Google Cloud Platform, and Google Meet.

To obtain a BAA with Google, your organization must have a paid Google Workspace account, and you must be signed in to an administrator account for your organization’s Google Workspace or Cloud Identity account. Non-administrator,  or users of the free edition of Google Workspace cannot review and accept a BAA from Google. 

Source: Google

Here’s how to review and accept the HIPAA Business Associate Amendment:

  1. Sign in to your Google Admin console using an account with super administrator privileges.
  2. In the Admin console, go to Menu > Account > Account settings > Legal and compliance.
  3. Go to the Security and Privacy Additional Terms section.
  4. Click Google Workspace/Cloud Identity HIPAA Business Associate Amendment to review the amendment.
  5. Click Review and Accept and answer all three questions to confirm that you are a HIPAA covered entity.
  6. To accept the HIPAA BAA, click OK.

It is important to note that signing a BAA with Google is just the first step in ensuring HIPAA compliance. Your organization must also implement measures to protect PHI, such as limiting access to PHI, encrypting data in transit and at rest, and training staff on HIPAA compliance. Regularly monitoring compliance is also critical, including conducting regular risk assessments, auditing access logs, and monitoring employee activity.

Google offers a HIPAA compliance guide that provides an overview of how Google Cloud can be used to support your organizations’ HIPAA compliance efforts. This guide includes information on Google’s approach to HIPAA compliance, the HIPAA requirements that Google Cloud meets, and the steps organizations can take to implement HIPAA-compliant solutions using Google Cloud.

Total HIPAA specializes in HIPAA compliance services, helping businesses adhere to HIPAA guidelines and protect sensitive data. Our experts ensure your organization remains compliant with HIPAA regulations, meaning you can focus on your core operations while we handle documenting the policies and procedures that make up your HIPAA compliance plan. Trust Total HIPAA for comprehensive compliance solutions tailored to your needs. Book a clarity call today.

Sharing is caring!


Looking for a Business Associate Agreement?

Download our free template to get started on your path toward HIPAA compliance.

Download Now

Let's keep in touch

Stay up to date on the latest HIPAA news, plus receive tons of free tools and info.

Navigating HIPAA Compliance in 2023

Watch the recording of this webinar to learn more about how you can become and stay HIPAA compliant!


Related Posts

What is Access Control in terms of HIPAA?

What is Access Control in terms of HIPAA?

Access control, in terms of cybersecurity, refers to the practice of managing and regulating who can access specific resources, systems, or data within an organization's network or information...

Comparing HIPAA and NIST

Comparing HIPAA and NIST

In the ever-evolving landscape of data security and privacy, two key frameworks have emerged as significant players: HIPAA and NIST. Both emphasize the importance of safeguarding sensitive...

Save & Share Cart
Your Shopping Cart will be saved and you'll be given a link. You, or anyone with the link, can use it to retrieve your Cart at any time.
Back Save & Share Cart
Your Shopping Cart will be saved with Product pictures and information, and Cart Totals. Then send it to yourself, or a friend, with a link to retrieve it at any time.
Your cart email sent successfully :)