Is NotebookLM HIPAA compliant?
Google says NotebookLM in Google Workspace, now named Gemini Notebook, is not covered by its BAA. The Google Cloud enterprise version is.
- Maker
- Google LLC
- Last checked
- November 11, 2026
Plan by plan
A business associate agreement (BAA) is the contract HIPAA requires before a tool handles patient information.
| Plan | BAA available | Detail |
|---|---|---|
| NotebookLM with a personal Google account | No | Google offers its BAA to Google Workspace and Google Cloud customers. A personal account is neither. |
| Gemini Notebook in Google Workspace (formerly NotebookLM) | No | Google says it is not covered by the BAA. |
| Gemini Notebook Enterprise on Google Cloud | Yes | Listed among the Google Cloud products covered by the Google Cloud BAA. |
What that means in practice
Google has renamed NotebookLM in Google Workspace to Gemini Notebook. Its Workspace privacy hub says Gemini Notebook is not covered by the Google BAA for HIPAA.
The version sold through Google Cloud is treated differently. Gemini Notebook Enterprise appears on the list of Google Cloud products covered by the Google Cloud BAA. A Google Cloud customer reviews and accepts that BAA before using the product with patient information.
NotebookLM on a personal Google account is not covered either. Google offers its BAA to Workspace and Google Cloud customers.
What the agreement leaves out
Gemini Notebook in Google Workspace is outside the Workspace BAA, even when the same Workspace account has a BAA in place for Gmail, Drive and the Gemini app.
How to read this answer
HIPAA has no certificate a product can hold. The part that can be checked is whether the maker signs a business associate agreement, and for which plans.
A signed agreement is where compliant use starts. The practice still has to set the tool up correctly, control who can use it, and train staff.
This page records what Google LLC documents. It is not legal advice. See the regulatory compliance guide or the HIPAA status of other AI tools.