Is Gemini HIPAA Compliant? What a Workspace BAA Covers

Gemini can be used with patient information inside Google Workspace once a super administrator has accepted Google's BAA in the Admin console. The BAA covers the Gemini app and Gemini in Workspace apps such as Gmail. It does not cover Gemini in Chrome, third-party add-ons or personal Google accounts, and Gemini Notebook is not on Google's list.

Most pages repeat a yes or no and stop. The useful question for a practice is narrower: which Gemini surfaces sit inside the agreement, and which are one click away from outside it? The answer turns on three things you control. Whether the BAA has been accepted at all. Which Gemini features your staff can reach. And whether anyone is using a personal account for work. Google settles part of the second question for you: once an organisation has signed the BAA, Gemini in Chrome is blocked automatically for its users. The personal-account question it cannot settle, and that is where slips are likeliest.

Follow me on Instagram@sagnikteaches

Gemini scope under the Workspace BAA

Google's help page for HIPAA with Workspace says admins accept the BAA electronically in the Admin console and that it is as binding as a paper agreement. It states that administrators must review and accept a BAA before using protected health information in Google services. On Gemini, the page says that for Gmail, "help me write", contextual smart replies and side-panel features are covered as part of Google Workspace with Gemini in HIPAA Included Functionality. Google's HIPAA compliance page, in a Workspace list last updated on 28 October 2026, names "Gemini App (excluding Gemini in Google Chrome)", "Gemini in Google Workspace" and the Gemini Mac app alongside Gmail, Drive, Meet and the other core services.

Connect on LinkedInSagnik Bhattacharya

That gives a working scope table. It reflects Google's pages in November 2026. Google changes the included-functionality list from time to time, so treat it as a snapshot and re-check before you rely on a row.

Subscribe on YouTube@sagnikteaches

Two of those rows are where practices slip. Gemini in Chrome feels like part of the same product, since it is the same assistant in a different place. And personal accounts feel harmless because the interface looks identical. Neither is inside your agreement.

The admin step that has to come first

Everything above depends on one action by one person. A super administrator opens the Admin console, goes to Account settings, then Legal and compliance, and reviews and accepts the HIPAA BAA there. Until that has happened, nothing in the table is "inside" anything, however sensible the Gemini settings look.

Practical points for a small practice:

• Find your super administrator. In many small clinics this is whoever registered the domain years ago, sometimes an outside IT contact. Confirm who it is.
• Read the BAA before accepting. Have your legal adviser or privacy lead skim it, especially the clause about using the controls Google's implementation guide describes.
• Save a copy and the date. Put it in the compliance folder next to your risk assessment.
• Allow time. Google's pages note that some Gemini admin changes can take up to 24 hours to apply, so do the setup a day before staff start.

Accepting the BAA does not turn on every Gemini feature, and apart from Gemini in Chrome, which Google blocks for BAA customers, it does not switch off the ones outside scope. That is configuration, and it is yours. Google's admin help also says that Gemini app access is controlled under Generative AI, then Gemini app, in the Admin console, and that one setting governs gemini.google.com, the Gemini mobile apps and Gemini in Chrome together.

Which Workspace plans include Gemini

Gemini is now built into the Workspace business plans rather than sold as a separate add-on. On the Starter plan you get Gemini in Gmail, the Gemini app and Google Vids. Standard and above extend Gemini to Docs, Sheets, Slides, Meet, Drive and Chat, and the Standard plan also advertises expanded Gemini Notebook access. That is a reminder that "included" and "covered by the BAA" are different things: a feature can be in your plan and still sit outside the agreement. Prices change, so read the current plan page rather than quote a number from a tutorial.

A dental practice's rollout week, day by day

Say a dental practice has two dentists, two hygienists, three assistants, a practice manager and two receptionists, all on Google Workspace Business Standard. Email and shared drives hold appointment letters, treatment plans and referral letters. The practice manager is also the super administrator. The week of the rollout looks like this.

1. Monday. The manager reviews the BAA in the Admin console, reads Google's implementation guidance, gets the adviser's nod and accepts. She saves the PDF and writes the date in the risk log.
2. Tuesday. She checks every staff member signs in with a practice Workspace account. Two hygienists use a personal Gmail on their phones for scheduling. Both are moved to the practice accounts, and the personal ones are removed from work devices.
3. Wednesday. She confirms that Gemini in Chrome shows as blocked, which Google does automatically once a BAA is signed, and uses Chrome Enterprise's GeminiSettings policy on the six practice computers as a second lock. She blocks installation of third-party add-ons that are not on an approved list.
4. Thursday. She briefs the team with a one-page rule sheet (below) and runs two exercises with before-and-after prompts.
5. Friday. She notes in the policy that Gemini Notebook is off limits for patient information and sets a diary reminder to re-read Google's list in three months.

None of that is technical. In this illustration the week costs about five hours of the manager's time, two of them on Tuesday's account check for ten people, and the result is a short, defensible answer to "are we using Gemini properly?".

Before and after: prompts for a covered app

With the BAA accepted and Gemini in Gmail covered, a receptionist can ask for help with a reply. Compare two ways to ask in the side panel.

Before: "Reply to this email and check on the web what the usual aftercare is for a wisdom tooth removal."

After: "Draft a short, friendly reply that confirms the appointment and says the dentist will explain aftercare on the day. Do not give any clinical advice."

The first prompt invites the assistant to bring in outside material and to say clinical things in the practice's name. The second keeps the output to what the practice has decided to say. Either could be used inside a covered app; only one follows the practice's own rules. A short template saved in a shared document helps staff reuse it.

A sample output to review

An illustrative reply from the second prompt: "Hi [first name], thanks for your message. This confirms your appointment on [date] at [time]. [Dentist name] will talk you through aftercare at the end of the visit. If anything changes before then, please call us on [number]. Kind regards, [your name]". What to check: the placeholders are real, the date matches the diary, and nothing implies a clinical judgement. The receptionist reads it, fills it in and sends it. That is the point: the assistant drafts, a person owns the message.

Sorting a dental practice's AI jobs against the scope

The scope table tells you what is inside. The practical question is which of your actual jobs fit. Here is an illustrative sort for the dental practice above.

Notice how few jobs fail. The practice loses only the browser assistant and the notebook tool for patient material. That is the usual result: a Workspace practice can keep most of what it wants by staying inside the covered surfaces and switching off the rest.

Gemini works on what a person can open

As with other suite assistants, Gemini in Workspace draws on files, emails and chats the signed-in user can already reach. That is useful, and it is a risk if sharing is loose. Take a realistic mistake: years ago the practice manager put the referral letters folder in Drive and set it to "anyone in the organisation can view" to save time during a staff change. Today a receptionist asks Gemini, "Find the last letter we sent about a particular family's orthodontic referral." The assistant can find it, because the receptionist can open it. Nothing was hacked; a permission was simply wider than anyone remembered.

The fix is dull and effective. Walk through every Drive folder and shared drive that holds patient documents, check who has access, and replace "everyone in the organisation" with named groups for clinicians and the front desk. Repeat after any staffing change. Ask the assistant itself to help: "List the kinds of document in this folder, without opening any patient's details" is not a safe test, so do the review by hand in Drive's sharing settings.

Gemini Notebook: why the answer is "keep it out"

Google's help centre now calls NotebookLM Gemini Notebook, and for Workspace users it is a core service like Gmail and Docs. It is attractive to a practice because you can add documents as sources and ask questions of them, with limits such as 50 sources per notebook on the Standard (free) tier. That is exactly the pattern that tempts a practice manager to upload the patient information pack, the clinical protocols and, eventually, a few patient letters. The first two are fine. The third is not, because Google's list of Workspace services in the BAA does not name Gemini Notebook, and the only Notebook listing sits under Google Cloud services as Gemini Notebook Enterprise, a separate product. Being a core service is about which Workspace terms apply, not about the BAA list. Until Google says in writing that your edition is covered by your BAA, treat it as outside.

A safe use: upload the practice's own policies, consent forms and price list, and ask staff questions of them. The staff policy Q&A tutorial shows how to build that with no patient data at all.

A short incident example and the response

An associate, rushed on a Friday, opens a referral letter on a home laptop where Chrome is signed in to a personal Google account, and uses Gemini in Chrome to summarise it. The letter has the patient's full name and a diagnosis. The practice's BAA blocked Gemini in Chrome for practice accounts, but the personal profile was never inside the agreement. Nobody notices until the following week, when the practice manager runs her quarterly check and asks each person which devices and accounts they use for work. The response worth copying: record what happened and when, ask the associate what was summarised (the letter, not the whole record), stop work documents being opened on personal profiles, decide with the adviser whether the event needs further steps, and add a line to the staff sheet. Nobody is disciplined for reporting; the process changes. That is the point of the quarterly check.

Questions to put to Google or your reseller

1. Which Gemini features does our edition's HIPAA included functionality list name today?
2. If a feature is not named, how do we get written confirmation of whether it is covered?
3. Google blocks Gemini in Chrome for BAA customers today: if that changes, how and when will we be told?
4. How are Gemini conversations retained, and who can view or delete them?
5. What is the process and timeline for notifying us of a security incident?
6. If Google adds a Gemini feature, is it on by default, and is it automatically in or out of scope?

Ask your reseller or account contact and keep the answers with the BAA. If the answer to the last question is "it depends", ask for the rule in writing and add a quarterly check to catch new features.

A rule sheet for Gemini at the front desk

Gemini at [practice name]

- Use Gemini only through your practice Workspace account. Never use a personal Google account for work.
- Gemini in Gmail, Docs and the Gemini app may be used with patient information only after the practice manager has confirmed the BAA is in place. Today's status: [date and status].
- Never use Gemini in Chrome with a page, document or email that contains patient information. Google blocks it for practice accounts; do not use it from a personal Chrome profile either.
- Do not use Gemini Notebook, third-party add-ons or any other Gemini-powered website for patient information.
- Share the minimum: ask Gemini to work on the sentence you need help with, not on the whole record.
- Check every draft before it is sent or filed. You remain responsible for what is sent.
- If you are unsure, do not paste. Ask [privacy lead].

Gems, skills and shared instructions

Many practices want a shared set of instructions so every draft sounds the same. Gemini offers Gems for that, and Google is moving them to "skills": support for Gems ends for personal Google accounts in November 2026 and for Workspace business, enterprise and non-profit accounts in March 2027, with existing Gems recreated as skills automatically. Google says skills are available now for personal accounts and coming soon to work accounts. Assume anyone you share a Gem with can see what is in it, so put only tone and format instructions in it, never a patient list, and check that the Gem or skill works within the covered Gemini app before relying on it. Do not upload patient letters as "examples": use invented ones.

A medical group, a chiropractic clinic and a counselling practice

A medical group on Business Standard. Accept the BAA, keep the Gemini app and Gemini in Gmail and Docs available, confirm Gemini in Chrome is blocked and require practice accounts. The group then uses Gemini for letters and summaries, with review.

A small chiropractic clinic on Business Starter. Starter includes Gemini in Gmail and the Gemini app, but not Gemini across Docs and Sheets. Accept the BAA, use Gemini in Gmail for reply drafts, and keep clinical notes in the clinic software. The chiropractor tutorial on what is safe without a BAA shows how to sort the jobs.

A counselling practice that never accepted the BAA. Nothing is covered. Staff may use Gemini for newsletters and templates only. If the practice wants Gemini for client letters, accepting the BAA, tightening settings and adopting the rules above is the route, or it uses a documentation tool built for therapists.

Checks to run once the BAA is accepted

1. Confirm the acceptance date and the person who did it.
2. List every user and confirm each uses a practice account.
3. Check which Gemini features are turned on for each organisational unit, and confirm Gemini in Chrome shows as blocked now that the BAA is signed.
4. Review Marketplace apps and add-ons, and block unapproved ones.
5. Check sharing on Drive folders that hold patient documents, since Gemini works on what a user can open.
6. Read Google's HIPAA included functionality list again, note the date, and set a quarterly reminder.
7. Run a one-hour training session with before-and-after prompts.

Item 5 echoes the permissions point in every tutorial of this kind: an assistant that works on whatever the user can open is only as careful as your sharing settings. A Drive folder open to the whole organisation will show up in answers. For comparison with another suite, see where Microsoft 365 Copilot's agreement stops, and for the stand-alone assistants, which ChatGPT plans can sign a BAA.

What the BAA still leaves with you

Google's BAA states that the customer must use the controls described in the HIPAA implementation guide and remains solely responsible for making sure its and its users' use of the covered services complies with HIPAA. In plain terms, you keep the staff training, the access controls, the incident process and the judgement about what goes into a tool. The accuracy of Gemini's drafts is yours as well: it can misstate a date or invent a detail, and the person who sends the message answers for it.

It helps to decide up front what AI is for in your practice. If most of the value is in drafting replies and summarising a thread, the covered Gmail features may be all you need. If you want an assistant that reads documents across Drive and drafts treatment letters, the permissions work grows. For help sorting that list, my AI implementation consultation starts with the jobs, and your legal adviser confirms the rest.

Questions practices ask about Gemini and the Workspace BAA

Who can accept the Google Workspace BAA?

A super administrator, through the Admin console under Account settings, then Legal and compliance. Google says administrators must review and accept a BAA before using protected health information in its services. If you have never done it, the BAA is not in place, whatever plan you pay for.

Is the free Gemini app on my personal Google account covered?

No. The BAA belongs to a Workspace organisation, and it covers the Gemini app as offered within Workspace. A personal account at gemini.google.com sits outside it, so staff must not put patient information into a personal Gemini chat.

Does the BAA cover Gemini in Chrome?

No. Google's HIPAA page lists the Gemini app with the note excluding Gemini in Google Chrome, and its admin help says Gemini in Chrome is blocked automatically for customers who have signed a BAA. The gap left is a personal Chrome profile, so your staff rules must cover that.

What about Gemini Notebook, formerly NotebookLM?

Google's list of Workspace services in the BAA does not name it, even though it is now a core Workspace service, and a Gemini Notebook Enterprise listing appears only among Google Cloud services. Treat Gemini Notebook as outside the Workspace BAA until Google's current list says otherwise in writing.

Do Gems and add-ons fall under the BAA?

Google states that third-party applications, including add-ons, are not covered by the BAA. Gems are becoming skills (Workspace business accounts lose Gems in March 2027), and the covered list changes, so check each feature against Google's current HIPAA list before staff use it with patient data.

Further reads

• Is Claude HIPAA Compliant? Which Plans Offer a BAA — Which Claude plans can sign a BAA and which cannot.
• AI Usage Policy for a Medical Practice: Template and HIPAA Rules — A fuller AI usage policy for a medical practice.
• HIPAA-Compliant AI Assistants for a Medical Office: BAA by Plan — A BAA check across the assistants a medical office might use.
• Is There an AI Tool for Pharmacists? What US and UK Teams Can Use — Yes: ChatGPT for Clinicians for verified US pharmacists, general business-plan tools elsewhere. What to use them for and what to keep out.
• AI Tools and AI Development: The Complete 2026 Guide — the AI hub, including every tutorial in the AI-for-business series.

Sources: Google Workspace admin help on HIPAA compliance with Google Workspace and on turning the Gemini app on or off; Google Cloud HIPAA compliance page (Workspace services list updated 28 October 2026); Google Workspace HIPAA BAA terms; Workspace pricing page; Gemini Apps help on the transition from Gems to skills; Gemini Notebook help on plans and work accounts (all read 4 November 2026).