Google reCAPTCHA widget can't be used with HIPPA compliant forms

  • kbmo
    Asked on April 19, 2021 at 1:27 PM

    I believe my client [KBMO Diagnostics (username: kbmo)] should have HIPAA compliant forms. I've been prompted to review the forms and the message coming up, at least on the first form, is that "Google reCAPTCHA widget can't be used with HIPPA compliant forms". If I remove the Google reCAPTCHA widget, what will replace it?

    There is a button to "Remove Widgets & Integrations" but no explanation. That's pretty scary to do, as I have no idea if the form will work after clicking it?

    Tom Rogers
    Tom Rogers Web Design

    Webmaster for KBMO Diagnostics 

  • Basil JotForm Support
    Replied on April 19, 2021 at 5:37 PM

    Hi,

    Your account is not currently HIPAA compliant.

    Not all widgets and integrations are HIPAA compliant, these fields will have to be removed to upgrade to a HIPAA compliant account, the u[grade wizards checks for these fields during the upgrade process.

    The Google reCAPTCHA widget is one of those fields, and it will be removed without being replaced in your form.

    Relevant guide: https://www.jotform.com/help/500-how-to-upgrade-to-hipaa-compliance#_

    Please let us know if you have any further questions.

  • kbmo
    Replied on April 19, 2021 at 9:00 PM
    A lot of care went into creating some of the forms which are used to order COVID test kits, and Food Inflammation Test kits. What if I get through this process and the forms don’t work?
    Using a Wizard sounds great, but there is no real guidance about what it’s actually doing.
    Just to be clear, there will be no reCaptcha feature, or anything equivalent once the forms are HIPAA compliant?
    Tom Rogers
    ``````````````````````````````````````````````````````
    Webmaster for KBMO Diagnostics
    webmaster@kbmodiagnostics.com
    24/7 Voice Mail 857-366-6955
    ...
  • Vanessa_T
    Replied on April 20, 2021 at 2:37 AM

    I have just tested this on our HIPAA account and was able to add a Captcha field.

    1618900250 607e751a05676 03810 Screenshot 10

    Since the upgrade wizard has prompted that it will be removed, then it might be that the connection or some settings in the backend needs to be reset. In that case, just let the wizard finish and re-add the captcha once the account is already HIPAA compliant.

    If your main goal is to have a HIPAA-compliant account but is hesitant in using the upgrade wizard, please note that there is no other way. If you do not use it then your account will remain non-HIPAA-compliant.

    Note that we are obliged to force users to enable HIPAA compliance on their account if they are a HIPAA-covered entity. Should a HIPAA-covered entity refuse to take necessary steps to obey HIPAA law, then we will have to disable the account.

    On the other hand, there are a lot of things that the wizard does and it breaks down the major category of each step during the upgrade process.

    Please note that the upgrade wizard has already been tested for quite some time and for thousands of our HIPAA-compliant user accounts. It is never the intention of any of our features to break any forms that the user creates. If in the unfortunate event that something out of our control happens, then you can simply contact us anytime.

  • kbmo
    Replied on April 21, 2021 at 5:01 PM

    I have completed the process of converting the forms. But I have not noticed the HIPAA badge which was supposed to be added automatically on completing the process. Please advise.

    Tom Rogers

  • Basil JotForm Support
    Replied on April 21, 2021 at 6:05 PM

    Hi,

    I have checked your account and HIPAA compliance is not enabled on the account.

    Please enable HIPAA compliance from your data page and complete any steps still required by the upgrade wizard.

    1619042627 6080a143b443c chrome J7bAlZIx Screenshot 10

    Please let us know if you face any issues.

  • kbmo
    Replied on April 23, 2021 at 2:19 PM

    We are all set with the setup, but now my client is complaining that the emails coming in with order info just show padlocks ("Hidden to protect your privacy").

    I see that the details are available online, but is there a way to set up their email so the order info is displayed?
    Tom

  • Basil JotForm Support
    Replied on April 23, 2021 at 3:55 PM

    Hi,

    Removing privacy can be done by removing the protected option on the top right of each field.

    Keep in mind Sensitive information needs to stay hidden.

    Guide: https://www.jotform.com/help/504-how-to-use-notification-and-autoresponder-emails-in-hipaa-accounts

    Please let us know if you require any further assistance.