Does Azure OpenAI Services provide HIPAA compliance and BAA

Question

Does Azure OpenAI Services provide HIPAA compliance and BAA

ishan saxena 60

Does Azure OpenAI Services provide HIPAA compliance and BAA(Business Associate Agreement). If yes how does it work and where do we need to sign up these compliances?

Pavankumar Purilla 8,570 Reputation points Microsoft External Staff Moderator

2025-04-17T05:44:15.4366667+00:00

Hi ishan saxena,

Yes, Azure OpenAI Service is HIPAA-eligible, and Microsoft provides a Business Associate Agreement (BAA) through the Microsoft Online Services Data Protection Addendum (DPA). Customers are not required to sign a separate BAA for each agreement, as the BAA is already included by default in the standard terms of eligible Microsoft licensing agreements such as Enterprise Agreements or those through a Cloud Solution Provider. The applicable legal terms, including the DPA and BAA, can be found directly on the Microsoft Licensing Terms portal at https://www.microsoft.com/licensing/terms.

As long as your organization is using Azure OpenAI Services under a valid licensing agreement and follows HIPAA-compliant practices such as hosting data in appropriate U.S. regions, implementing encryption, and maintaining proper access controls no additional steps are needed to enable HIPAA compliance or BAA coverage.

For more information: Health Insurance Portability and Accountability Act (HIPAA) & Health Information Technology for Economic and Clinical Health (HITECH) Act.)
I hope this information helps. Thank you!
Pavankumar Purilla 8,570 Reputation points Microsoft External Staff Moderator

2025-04-18T02:37:04.0966667+00:00

Hi ishan saxena,
Did you get any chance to check the response. Thank you!
Pavankumar Purilla 8,570 Reputation points Microsoft External Staff Moderator

2025-04-21T00:33:07.5633333+00:00

Hi ishan saxena,
Just following up to see if you had a chance to review the above response. Thank you!

Your answer

Pavankumar Purilla 8,570 Reputation points Microsoft External Staff Moderator

2025-04-17T05:44:15.4366667+00:00

Hi ishan saxena,

Yes, Azure OpenAI Service is HIPAA-eligible, and Microsoft provides a Business Associate Agreement (BAA) through the Microsoft Online Services Data Protection Addendum (DPA). Customers are not required to sign a separate BAA for each agreement, as the BAA is already included by default in the standard terms of eligible Microsoft licensing agreements such as Enterprise Agreements or those through a Cloud Solution Provider. The applicable legal terms, including the DPA and BAA, can be found directly on the Microsoft Licensing Terms portal at https://www.microsoft.com/licensing/terms.

As long as your organization is using Azure OpenAI Services under a valid licensing agreement and follows HIPAA-compliant practices such as hosting data in appropriate U.S. regions, implementing encryption, and maintaining proper access controls no additional steps are needed to enable HIPAA compliance or BAA coverage.

For more information: Health Insurance Portability and Accountability Act (HIPAA) & Health Information Technology for Economic and Clinical Health (HITECH) Act.)
I hope this information helps. Thank you!
Pavankumar Purilla 8,570 Reputation points Microsoft External Staff Moderator

2025-04-18T02:37:04.0966667+00:00

Hi ishan saxena,
Did you get any chance to check the response. Thank you!
Pavankumar Purilla 8,570 Reputation points Microsoft External Staff Moderator

2025-04-21T00:33:07.5633333+00:00

Hi ishan saxena,
Just following up to see if you had a chance to review the above response. Thank you!

Share via

Does Azure OpenAI Services provide HIPAA compliance and BAA

Your answer