HIPAA compliance

Google Workspace and Gemini Enterprise provide tools to help organisations maintain HIPAA compliance when handling Protected Health Information. By signing a Business Associate Amendment, administrators ensure that core services like Gmail, Drive, and Gemini operate within Google's secure and compliant framework.

This is available for all paid Google Workspace editions and specific Gemini Enterprise tiers, including Standard and Plus. It is designed for healthcare providers, insurers, and any organisation that must protect sensitive health data under UK or international regulations.

A super administrator must review and accept the amendment in the Google Admin console. Go to Account settings, then Legal and compliance, and find the HIPAA BAA under the Security and Privacy Additional Terms section.