Source note · HIPAA for contact centers and UC
A UCaaS or CCaaS provider that stores call recordings voicemail transcripts or chat history containing PHI for a covered entity is unlikely to qualify for the conduit exception and should be treated as a business associate needing a BAA.
inferred · Checked 2026-10-01
- Vendor
- not restricted
- Product
- not restricted
- Subsystem
- business associate scope
- Deployment
- multi-tenant
- Region
- us
- Release range
- current as of 2026-10-01
- Status
- inferred
- Checked
- 2026-10-01
Sources
- Modifications to the HIPAA Privacy, Security, Enforcement, and Breach Notification Rules Under the HITECH Act and the Genetic Information Nondiscrimination Act; Other Modifications to the HIPAA Rules (Final rule, 78 FR 5566) — U.S. Department of Health and Human Services via Office of the Federal Register / GovInfo · tier 1 standards and regulators · 78 FR 5571-5572, conduit and persistent-storage discussion; applied to UC and CCaaS storage
Cite this note
APA
WarmTransfer. (2026, October 1). HIPAA for contact centers and UC: source note hipaa-contact-center-ccaas-not-a-conduit. WarmTransfer. https://warmtransfer.net/knowledge/claims/hipaa-contact-center-ccaas-not-a-conduit
BibTeX
@misc{warmtransfer-claim-hipaa-contact-center-ccaas-not-a-conduit,
title = {HIPAA for contact centers and UC: source note hipaa-contact-center-ccaas-not-a-conduit},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/hipaa-contact-center-ccaas-not-a-conduit},
note = {Source note hipaa-contact-center-ccaas-not-a-conduit, checked 2026-10-01}
}