Companies that handle personally identifiable health information are subject to data privacy rules under the Health Insurance Portability and Accountability Act—rules that have grown more complex with the proliferation of mobile health applications (mHealth apps). Those that want to develop mHealth apps in a secure and compliant manner have two options: Build a HIPAA-compliant application of your own, or buy one from a provider. This week, we ask UCLA how it weighed the pros and cons for its mHealth development.

Jaclyn Jaeger is a freelance contributor to Compliance Week after working for the company for 15 years. She writes on a wide variety of topics, including ethics and compliance, risk management, legal,...