question

Yes. On June 11, 2019, AWS announced that Chime is now HIPAA Eligible. https://aws.amazon.com/about-aws/whats-new/2019/06/chime_hipaa_eligibility/

HIPAA Eligibility applies to all AWS Regions where Amazon Chime is available. See the Architecting for HIPAA Security and Compliance on Amazon Web Services Whitepaper for information and best practices about how to configure AWS HIPAA Eligible Services to store, process, and transmit PHI. For more information regarding HIPAA and Amazon Chime communication considerations, see the Amazon Chime Administration Guide.

For more information about AWS Services and HIPAA compliance, please see the following websites.

• https://aws.amazon.com/compliance/hipaa-eligible-services-reference/
• https://aws.amazon.com/compliance/services-in-scope/

The process for completing a BAA with AWS is performed via the AWS console for the AWS account (please see this webpage for more details: https://aws.amazon.com/artifact/getting-started/#Accept_Agreements)

• Sign into the AWS Management Console
• Navigate to Artifact (enter in the search field)
• Click on the Agreements tab
• Download the BAA, accept the NDA and accept the Agreement