Yes, Bitlocker has defined itself as HIPAA compliant for data at rest. Full compliance requires integrating with a cloud service (such as Azure) and purchasing volume licensing so Microsoft will sign a BAA.
Since Bitlocker integrates with the Microsoft Windows operating system, covered entities should use additional security precautions if cloud storage is involved. Another benefit of using Bitlocker for HIPAA compliance is the data protection feature that addresses data theft risks, including exposure from computers that are stolen, lost, or inappropriately decommissioned.
Compliance depends on several criteria, such as integrating Azure cloud service and having volume licensing. Microsoft will sign a BAA as a contract addendum with customers who have a Volume Licensing/Enterprise Agreement.
