title:User Deletion and Suppression

-path:/privacy/account-deletion

title:Account & Data Deletion

-path:/privacy/hipaa-eligible-segment

title:HIPAA Eligible Segment

-path:/privacy/faq

title:Privacy FAQs

-section_title:Protocols

title:HIPAA Eligible Segment

Segment is a HIPAA eligible platform, and meets the data privacy and security requirements of healthcare customers and their stakeholders. For more information about Segment becoming HIPAA eligible, see the[announcement blog post](http://segment.com/blog/segment-for-healthcare){:target="_blank"}.

Before you begin, check that the Segment products and services you'll use for your HIPAA workflows are on the list of Twilio's[HIPAA Eligible Products and Services](https://twil.io/HIPAA-eligible-products-and-services){:target="_blank"}. After you've verified availability, contact your Account Expert to[request a demo](https://segment.com/contact/sales/){:target="_blank"}.

Ensure your Workspace is eligible for HIPAA before you configure and send any personal health information (PHI).

1. In your Workspace, navigate to**Settings > Workspace Settings**.

2. On the**General Settings** tab, ensure that the HIPAA badge appears. This badge confirms that the Workspace is HIPAA eligible.

With the BAA signed and Workspace confirmed as eligible, you can start building. For more information about starting a HIPAA compliant implementation, see Twilio's[Architecting for HIPAA on Twilio](https://twil.io/architecting-for-hipaa){:target="_blank"}, which outlines the shared responsibilities and requirements for building and maintaining HIPAA-compliant workflows in Segment.

title:Privacy Tools Overview

Segment includes a suite of Privacy tools to help your organization comply with regulations like the GDPR and the CCPA.

Segment includes a suite of Privacy tools to help your organization comply with regulations likeHIPAA,the GDPR, and the CCPA.

{% include components/signpost.html sections=site.data.privacy.sections %}

{% include content/plan-grid.md name="privacy" %}

When preparing for new privacy regulations (such as the GDPR or the CCPA), the

When preparing for new privacy regulations (like HIPAA, the GDPR, or the CCPA), the

best practice is to create a comprehensive data inventory which includes details

about what personal information you collect, where you collect it from, where

you store the data, and who has access to it. The Privacy Portal helps automate

The Inbox helps you keep track of new restricted data types as they are captured, quickly classify them, and build a data Inventory.

We detect these fields by scanning data from your Web, Mobile, Server, and Cloud Event Sources to detect PII based onour[default PII matchers](#default-pii-matchers). New properties sent into Segment appear in the Inbox in realtime.

Segment detects these fields by scanning data from your Web, Mobile, Server, and Cloud Event Sources to detect PII based onthe[default PII matchers](#default-pii-matchers). New properties sent into Segment appear in the Inbox in realtime.

When you view the Inbox for the first time, it displays every property that was sent into Segment from Web, Mobile, Server, and Cloud Event Sources dating back to August 9, 2019. ([Cloud Object Sources](/docs/connections/sources/#cloud-apps) do not appear in the Inbox at this time.)