HIPAA compliance at Lehigh University is limited to a few specific areas on campus. If Zoom is used in these sensitive areas then these settings are mandatory and must be configured by the individual user.
Individual responsibilities for Zoom configuration in HIPAA-Compliant Settings Only:
Open Web Browser → https://www.zoom.us/web/sso/login?en=signin#/sso
Enter the following for company domain: lehigh
Enter username and password credentials and click Login
Located on the left menu pane: select Settings
Navigate to security: select "Waiting Room". This will allow users to enable a virtual staging area that prevents people from joining a meeting until the host is ready. Meeting host(s) can then admit people in the Waiting Room individually or all at once. This reduces the risk of unauthorized participant(s) from joining the meeting.
Scroll down within security section and enable the following: "Allow use of end-to-end encryption". Click Enable.
Scroll down to "Default encryption type" and select the following: End-to-end encryption. Click Save.
Scroll down to "Only authenticated meeting participants and webinar attendees can join meetings and webinars" and select to enable authentication functionality.
Scroll down to "Only authenticated users can join meetings from Web client" and select to enable reinforce web authentication functionality.
Scroll down to "Block users in specific domains from joining meetings and webinars" and enable functionality. Add domains and click Save.
Scroll down to "Meeting chat" and disable (e.g., select slider) to not allow meeting participants to send chat messages. Click Disable.
Scroll down to "Screen sharing" and disable functionality.
In an Active Meeting Only: Click on Host tools and select Lock Meeting feature in order to prevent any other participants from joining the meeting. See screenshot below.
HIPAA-Best Practice: Adopt and follow as a best practice limiting the transmission of ePHI data to a minimum.
Two-Factor Authentication Verification Only: Verify with your organization (e.g., LTS IS) that Zoom’s Two-Factor Authentication is enabled to protect users against security breaches.