Are NFC business cards HIPAA compliant?
Standard NFC business cards share only professional contact information — names, phones, emails — which is not covered by HIPAA. If an NFC platform is being used to store or transmit actual patient health data (PHI), that platform needs HIPAA-compliant infrastructure. Contact information alone is not PHI.
HIPAA and professional contact sharing
HIPAA regulates protected health information (PHI) — individually identifiable health data. A doctor's name, practice name, phone number, and email address are not PHI. Using an NFC card to share that contact information with a patient or colleague does not create a HIPAA obligation. The card is functioning as a contact card, not a medical record.
NFC health profile platforms: a different question
Some platforms (including Radius Health) offer NFC wristbands or cards designed to store emergency medical information — blood type, allergies, medications. If a platform stores identifiable health data, HIPAA compliance depends on whether the platform is a covered entity or business associate, how the data is stored, and who has access. These platforms should be evaluated against HIPAA requirements separately.
Can nurses and doctors use NFC business cards?
Yes — sharing professional contact info via NFC is no different from a traditional business card. It's not a HIPAA concern.
What if I want to include my specialty or practice info on an NFC card?
Professional specialty, practice name, and general services offered are not PHI. Include them freely on your NFC business card profile.
Do NFC card analytics create HIPAA obligations?
Analytics on who taps your card (anonymized tap counts, referrer sources) are not PHI. Your platform's privacy practices regarding any form submissions should be reviewed separately if you collect patient contact information through a lead form.