I'm building a new website, and I'm trying to figure out if I need to worry about HIPAA. And if I do, I'm trying to figure out a way I can stop worrying about HIPAA. An example of something kinda similar, is the symptom checker on WebMD. You can put in some info that's considered personally identifiable, along with your symptoms. Then it gives you some possibly relevant medical information. But they have this disclaimer:
This tool does not provide medical advice It is intended for informational purposes only. It is not a substitute for professional medical advice, diagnosis or treatment. etc...
My question is, does that disclaimer make them immune to HIPAA? And if it does, would it still work if people had to pay to use it?
I'm just trying to get an idea what might be ok. I'll definitely do more research or ask a lawyer, if it seems like the right way to go.
edit: The first version of my site may not fall under HIPAA's rules. But if all goes well, I may add stuff, or have customers who are covered by HIPAA, that would require me to comply with HIPAA. So I'll build my site with HIPAA, and other similar legal complications in mind. Also, both answers and the discussion, were very helpful. And I can't really say which answer+discussion was more helpful. But I really should pick one, so I will. Thanks for the help!