Companies that handle personally identifiable health information are subject to data privacy rules under the Health Insurance Portability and Accountability Act—rules that have grown more complex with the proliferation of mobile health applications (mHealth apps). Those that want to develop mHealth apps in a secure and compliant manner have two options: Build a HIPAA-compliant application of your own, or buy one from a provider. This week, we ask UCLA how it weighed the pros and cons for its mHealth development.



