hamdesigns.co
HIPAA Website Scan Report
There are no results.
Analytics
Tools like Google Analytics may collect visitor data considered PHI under HIPAA, requiring a signed BAA to be compliant.
This Is a Title
Risk
Edit this paragraph to add any content you would iike to share about your company or service.
Trackers
Marketing trackers can capture user behavior tied to health interests, which may violate HIPAA without proper safeguards and agreements. This is typically high risk, since you can’t control what data is collected or shared—and patient consent is usually not obtained.
Facebook Conversion Tracking
High
Tracks user behavior after ad clicks. May share sensitive data with Meta.
Facebook Pixel
High
Tracks website visitors and may result in unauthorized disclosure of PHI—specifically addressed in HHS guidance.
LinkedIn Insights
High
Tracks engagement from LinkedIn ads. Could expose PHI if placed on health pages.
Facebook Signal
High
Facebook content insights. If used on patient pages, could transmit visit behavior.
Forms
Website forms collect sensitive information like names, symptoms, or contact details—making them high risk if PHI is submitted without a Business Associate Agreement or proper security.
Wix Forms
High
Form builder lacks required HIPAA compliance features, and Wix does not provide a Business Associate Agreement (BAA) for form submissions.