US · Healthcare
HIPAA
The US law protecting health information, with administrative, physical and technical safeguards.
Who it applies to
Healthcare providers, health plans and every vendor that handles their patient data.
What it can cost
Up to $2.19 million a year for violations of the same requirement (2026 inflation adjustment).
- Rules
- Privacy, Security and Breach Notification
- Breach notice
- To individuals within 60 days of discovery
- Applies to
- Covered entities and business associates
What HIPAA asks of you
- 01Administrative safeguards
- 02Physical safeguards
- 03Technical safeguards
- 04Risk analysis and management
- 05Business associate agreements
- 06Breach notification
How orta covers HIPAA
56 HIPAA requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Policies drafted from a conversation
orta interviews your team by voice or text, asks only what HIPAA needs, and drafts the policy set from the answers.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
What feeds it
- Continuous complianceA passing check counts in every framework that needs it.
- Cloud postureYour cloud accounts, checked. Your data, left where it is.
- Runtime detectionCatch the attack while it is happening.
