Fact · Voice privacy and security
HHS says the covered entity and a cloud service provider that holds its health information must sign a HIPAA-compliant business associate agreement.
Checked against its source on October 16, 2026
In the source's own words
“the covered entity (or business associate) and the CSP must enter into a HIPAA-compliant business associate agreement (BAA)”
Guidance on HIPAA & Cloud Computing, U.S. Department of Health and Human Services, Office for Civil Rights, n.d., Question 2: If a CSP stores only encrypted ePHI and does not have a decryption key, is it a HIPAA business associate?.
Open the original- What it measures
- The sentence follows HHS's answer that a provider holding encrypted data is still a business associate. The business associate agreement, or BAA, is the contract HIPAA requires.
- What it does not show
- HHS states the requirement for cloud providers. Whether a product's terms include a BAA is a question for that vendor's contract, which this fact does not settle.
Source
Cited on
- Is Voice to Text Safe? How to Dictate PrivatelyGuide
- Medical Dictation: Software, Devices and How It WorksGuide
- Is Whisper AI Safe? Privacy and Security ExplainedGuide
- Is Dictation HIPAA Compliant? What Makes It SafeGuide
- Transcription Software: How to Choose OneGuide
- Dictation for Nurses, Therapists and Allied HealthGuide
- Is Apple Dictation Private? What Apple KeepsGuide
- Windows Dictation Privacy and Online Speech RecognitionGuide
- Dictation at Work: Enterprise and Government PoliciesGuide
- Can therapists use AI scribes for progress notes?Question
- Can you use speech to text for confidential documents?Question
- Do you need a BAA for dictation software?Question
- Is Apple Dictation HIPAA compliant?Question
- Is Apple Dictation safe to use?Question
- Is it safe to dictate passwords and sensitive information?Question
- Is there a free medical dictation app?Question
- Is transcription software HIPAA compliant, and how do you check?Question
- Is Whisper AI HIPAA compliant?Question
- Is Windows dictation HIPAA compliant?Question
- What is the best medical dictation software?Question
- What should a company dictation policy include?Question
- Which dictation apps and software are HIPAA compliant?Question
- Business associate agreement (BAA)Glossary