HIPAA and Hotel WiFi: What Telehealth Providers Get Wrong
I’ve been doing remote work for years, mostly in healthcare IT. I’ve seen colleagues take their laptops to coffee shops, airport lounges, and yes, hotel rooms. And every time I hear someone say “I’ll just use the hotel WiFi, it’s fine” – I cringe a little. Because if you’re a telehealth provider handling protected health information (PHI), that’s not just a bad idea. It’s a compliance time bomb. Let’s be real: telehealth has exploded. Therapists, doctors, and nurses are logging in from vacation rentals, business trips, and even RVs. And the rules around patient privacy haven’t gotten any more forgiving. HIPAA violations can mean fines up to $50,000 per violation, and in 2023 the Office for Civil Rights fined a mental health provider $60,000 for a single breach tied to unsecured WiFi. So yeah, this matters. What’s the actual risk? Hotel WiFi is a shared network. Anyone in the lobby, next room, or even a parking lot can potentially sniff traffic. Sure, most sites use HTTPS now, but ...