A Path to HIPAA-Compliant Healthcare Marketing

Our proven process helps healthcare marketers and their legal teams feel confident among ever-changing privacy guidelines.

Do your marketing and legal teams need a mediator?

Recent developments related to FTC, new privacy-focused state laws, and HIPAA guidelines have resulted in patient marketing tactics that used to be considered industry standard now being prohibited.

Tools healthcare marketers relied on for years are now “non-compliant.” Legal teams want to remove all tracking and marketers want to continue to understand and track marketing efforts – leaving no clear path forward.

Let’s Talk

Our Three-Step Privacy & Compliance Process

As healthcare marketers ourselves, Hedy & Hopp is here to make sure your marketing efforts are compliant and effective — while providing peace of mind for patients (and your legal team).

To get you there, we designed a detailed process in partnership with an attorney specialized in digital healthcare and privacy compliance, including HIPAA and GDPR.



Step 1: Audit

Once we align on specific areas of compliance concern for your company (HIPAA, GDPR, etc.), our team reviews your current marketing analytics tools, campaigns, third-party tags, CRMs – any tool marketing is using to drive patient volumes. We will flag areas of concern and our attorney will review our audit findings and confirm alignment.

Step 2: Educate

We have created a sliding scale of compliance to help legal teams communicate where they would like their marketing compliance to land. Do you want a gold star from OCR? Or are you OK with a moderate approach? We’ll educate you on the scale and your team will dictate your organization’s compliance goals.

Step 3: Recommend

With your compliance goals in mind, we’ll create a recommendations document that outlines your path forward, including changes to your marketing analytics technology and digital marketing tactics. After our recommendations are presented, your legal team can talk with our attorney to ask about our approach, reasons for guidance, etc. Our #1 goal is to ensure both sides of your team are aligned with a new plan.

Check out our podcast series around compliance from a legal and marketing perspective:

OCR’s HIPAA Bulletin – what it means for healthcare marketers (a legal POV)
OCR’s HIPAA Bulletin – what it means for healthcare marketers (a marketer’s POV)
HIPAA & FTC 101 for Marketers
GDPR, State Laws & How Healthcare Marketers Are Navigating New Privacy Guidelines

Our Take: AHA’s Response to Senate RFI on Health Data Privacy

Ready to get compliant?

Schedule a free, 30-minute Compliance Consultation with us today.