I have a client that contacted me about adding a new form to their existing site that would be used to capture medical history. much like...

https://www.themanhattandentist.com/patientforms.php

I've been trying to research if there is any HIPAA guidelines to doing something like this, but have been unable to find something concrete.

Anyone have any input?

thanks