Provision record
Google Cloud · Google Cloud Terms · View original document ↗

HIPAA health information requires executed BAA

High severity Explicit document language Common · 244 of 352 platforms
Stay ahead of the changes
Track Google Cloud and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Google Cloud's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

High Sep 3, 2026

The updated terms authorize Google Cloud to impose full-month billing charges if it determines a customer engaged in bad-faith dealing, dishonesty, or attempted to avoid fees or circumvent usage limits, and to charge for all end-user accounts active during that month regardless of whether any were later disabled. The revised policy also permits immediate service suspension if Google reasonably determines a customer using a delayed payment method poses a non-payment risk, without requiring actual late payment or cure time. Additionally, Google may now terminate the agreement immediately if it reasonably determines a customer's material breach is incapable of being cured, eliminating the previous 30-day cure period. Customers using bank transfers or similar delayed authorization payment methods should review their account practices for any activity Google might classify as 'Customer Malfeasance' under the new definition.

View change record →

How other platforms handle this

Tinder Medium

May harm the reputation of Tinder or its affiliates, meaning the uploading or sharing of content on the Tinder platform that is defamatory to Tinder or its affiliates or advocates misuse of the Service...

Glassdoor Medium

Therefore, we do not "sell" or "share" data (as defined by applicable law) belonging to minors.

Netflix Medium

Some Offline Titles may not be playable in certain countries and if you go online in a country where you would not be able to stream that Offline Title, the Offline Title will not be playable...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
Customer will not...access or use the Services...(ix) to transmit, store, or process health information subject to United States HIPAA regulations except as permitted by an executed HIPAA BAA.

Excerpt from Google Cloud's Terms

Provision details

Document information
Document
Google Cloud Terms
Entity
Google Cloud
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 10, 2026
Record ID
CA-P-055950
Document ID
CA-D-00646
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
f6632267e31798bebd26c9efe2d8ff208cbc5157a1e135e65a34d83f54b90b18
Analysis generated
May 7, 2026 19:20 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Google Cloud
Document: Google Cloud Terms
Record ID: CA-P-055950
Captured: 2026-05-07 19:20:38 UTC
SHA-256: f6632267e31798be…
URL: https://conductatlas.com/platform/google-cloud/google-cloud-terms/provision/CA-P-055950/hipaa-health-information-requires-executed-baa/
Accessed: Sept. 17, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Google Cloud's HIPAA health information requires executed BAA clause do?

The clause states: “Customer will not...access or use the Services...(ix) to transmit, store, or process health information subject to United States HIPAA regulations except as permitted by an executed HIPAA BAA.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 244 platforms. See the full comparison.

Is ConductAtlas affiliated with Google Cloud?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Google Cloud.