Is Gmail (free) HIPAA compliant?

No

Google offers its HIPAA Business Associate Amendment only to Google Workspace and Cloud Identity customers, and an administrator must accept it in the Admin console. Google says customers who have not signed a BAA 'must not use PHI' in its services. A free personal Gmail account has no Admin console, so it cannot accept the BAA.

What to use instead

Sources

• support.google.com/a/answer/3407054

Last verified 2026-09-24. General information, not legal advice.