Constant Contact BAA: Running HIPAA Compliant Email Campaigns

We get asked a lot about HIPAA compliant email marketing services, especially since most EHR's don't have any good CRM functionality built in.

Our go-to for over a decade has been Constant Contact (we use it for our Saturday "Follow-Up Appointment Funnel"), which generates over 100 appointment requests per week for our practice. 

It's ideal for saving time AND limiting HIPAA breach risk on emails, since it allows you to send to everyone at once without using the BCC feature. 

If you're going to use it however, you need to be sure to get a Business Associates Agreement (BAA), which you can request from them at no cost. 

To get Constant Contact HIPAA compliant by requesting a BAA, you simply set up your account and then email their legal department at [email protected].

THEN, you've got to send them back a copy with your signature on it and store it with the rest of your HIPAA compliance documentation. 

We'd love to know your questions and thoughts!