HIPAA Consent Workflow

When the HIPAA consent workflow is enabled in Zinng, the platform automatically manages consent for SMS communications to ensure HIPAA compliance. This workflow applies to all text message exchanges between organizations and phone numbers that haven't previously provided consent.

Initial Consent Process

When a text message is received from a phone number without existing HIPAA consent:

Automated Response Message:

[Organization Name] complies with HIPAA and wants to exchange text messages with you.
Text messaging may not be fully secure. To consent, reply YES.

User Consent:

• If the user replies "YES", HIPAA consent is granted
• The user is marked as consented in the Zinng interface with a green checkbox
• Normal SMS communication can proceed

Manual Override

Organizations can manually override HIPAA consent requirements when necessary.

System Warning Message:

⚠️ Caution: HIPAA consent requirement has been overridden.
Avoid sending protected health information.

This warning appears in the Zinng interface to remind staff about HIPAA compliance when consent has been bypassed.

Opt-Out Process

User Opt-Out:

• If a user sends "STOP" at any time during conversations, they are immediately opted out of SMS communications
• The user is marked in the system with a red X indicating SMS opt-out status
• The organization cannot send text messages to this number