Is Outlook.com HIPAA compliant?
No
Microsoft provides its HIPAA BAA through the Microsoft Online Services Data Protection Addendum to covered-entity and business-associate customers of its in-scope commercial cloud services. The consumer Outlook.com service is not on that in-scope list, so no BAA covers it.
What to use instead
Microsoft 365
BAA from the Microsoft 365 Business Basic plan · $7/mo per user
Paubox
BAA from the Standard plan · $32/mo per account
Hushmail for Healthcare
BAA from the Healthcare Basic plan · $11.99/mo
Sources
Last verified 2026-09-24. General information, not legal advice.