Does HP offer a BAA for HIPAA-compliance?

[ALB0400]

Does HP offer a BAA for scanning and printing, and if not what do they recommend to do in order to use their products so they're HIPAA compliant?

[VikramTheGreat]

Hi @ALB0400,

Welcome to the HP Support Community.
 

Thank you for posting your query. I will be glad to help you.

Thanks for raising this important question. Ensuring HIPAA compliance when using HP printers and scanners is absolutely critical for any healthcare-related organization.

As of now, HP does not publicly offer a standard Business Associate Agreement (BAA) for its consumer-grade or small business printers and scanners, including those used with the HP Smart app. This means that if your scanning or printing workflow involves transmitting Protected Health Information (PHI) through HP’s cloud services (e.g., scan-to-email via HP Smart), it may not meet HIPAA requirements unless HP explicitly signs a BAA, which they typically do not.

HP’s Recommendations for HIPAA Compliance

While HP doesn’t directly offer a BAA, they and other experts recommend the following best practices to ensure HIPAA compliance when using printers and scanners:
 

1. Avoid Cloud-Based Scanning for PHI

• Use local scan-to-folder or scan-to-email via secure internal servers.
• Disable scan-to-cloud or HP Smart cloud services for sensitive documents.

2. Enable Device-Level Security

• Use PIN codes, badge authentication, or biometric access for printing/scanning.
• Restrict access to devices physically and digitally.

3. Encrypt and Overwrite Stored Data

• Enable hard drive encryption on multifunction printers (MFPs).
• Configure automatic data overwriting after each job.

4. Segment Network Access

• Place printers on a separate VLAN or network segment.
• Disable unused USB ports and enable firewall rules.

5. Secure Disposal of Devices

• Before returning or disposing of a printer, wipe or destroy the hard drive.
• Request a data destruction certificate if using a third-party service.

🔗HP Support Services Privacy Statement Addendum | HP® Official Site

🔗HP Fuels the Future of Healthcare with Safe, Smart, and Secure Devices | HP® Official Site

I hope this helps.

Take care and have an amazing day!
 

Did we resolve the issue? If yes, please consider marking this post as "Accepted Solution" and click "Yes" to give us a helpful vote - your feedback keeps us going!

Regards,

VikramTheGreat