How do I set up HIPAA compliance now that things have shifted over to microsoft defender? All of the previous guidance was for microsoft security center, which is no longer active.

Question

I am trying to make my email HIPAA compliant via Outlook and Microsoft 365. All of the options online appear outdated and I continue to get in a loop between pages that I am directed to that gets me absolutely nowhere. Given the outdated and incorrect informaiton, I would prefer to speak with a representative. There really should be more live support.

Answer 1

Dear Susannah Turner,

I hope this message finds you well!

Thank you for reaching out to the Microsoft Community. We appreciate your inquiry, and we are dedicated to assisting you promptly. Our team is actively reviewing your situation, and we will provide you with an update on the thread accordingly.

Your patience and understanding are valued, and we sincerely thank you for your time and cooperation.

If you have any further questions or concerns in the meantime, please feel free to let us know. We are here to help!

Best regards,

Ashraf.

Answer 2

Hello Susannah Turner,

Good day! Thanks for posting in the Microsoft Community. We are happy to assist you.

To get live support kindly open a service request in the Microsoft 365 admin center by following the steps in the attached document Get support - Microsoft 365 admin | Microsoft Learn. The online support there will assist you remotely guide you and support you need on this matter. Please note only admins can open a service request in the Microsoft 365 admin center.

In the meantime, you can also check and follow these steps:

1. Ensure that your Microsoft 365 subscription includes the necessary HIPAA compliance features. You can check this by logging in to your Microsoft 365 admin center and navigating to the Compliance Center.
2. Configure the necessary security and compliance settings in the Compliance Center. This includes setting up data loss prevention policies, retention policies, and eDiscovery.
3. Enable multi-factor authentication for all users in your organization to ensure that only authorized users can access sensitive data.
4. Train your employees on HIPAA compliance best practices, including how to handle sensitive data and how to report security incidents.

Thank you for your time and understanding. Feel free to add your post to the Microsoft Community for other questions.

Stay safe and healthy.  

Sincerely,

Simbarashe | Microsoft Community Moderator