Does LinkedIn Ads sign a BAA?
The answer
Does not sign a BAA
No. LinkedIn's Ads Agreement says you will not transfer Sensitive Data to LinkedIn, including by installing the Insight Tag on a page that collects medical data.
Ad platforms. Checked on the vendor's own pages on .
Running LinkedIn Ads for a healthcare brand? Curve Compliance sends your conversions server-side with PHI filtered out, under a BAA on every plan. Book a call
On this page
What LinkedIn says
“You will also not transfer to LinkedIn any data that you know or reasonably should know was (1) collected from or about children under the age of 16, or (2) constitutes Sensitive Data, including by way of installing the Insight Tag on a page that collects medical, financial, or other Sensitive Data about identified or identifiable individuals.”
“You may not target Ads based on Sensitive Data.”
What this means for ad tracking
LinkedIn Ads is where your conversion data ends up, so the question is not whether LinkedIn will protect PHI but what you send it. The Insight Tag sends the page address, the event name and identifiers with every conversion, and on a healthcare site those can describe a condition or a treatment.
LinkedIn's own terms rule out health information, so the workable route is to send LinkedIn Ads conversions that carry none: a neutral event name, hashed identifiers and no page details that reveal care.
Curve Compliance sends LinkedIn Ads conversions that way: server-side in place of the Insight Tag, with neutral event names, PHI-like pattern detection and SHA-256 hashed identifiers, under a BAA it signs on every plan. Book a call to see it on your own funnel.
How Curve helps
- Curve Compliance sends your LinkedIn Ads conversions server-side, in place of the Insight Tag, with neutral event names and SHA-256 hashed identifiers.
- PHI-like pattern detection flags condition names, form answers and emails in URLs before data reaches an ad platform, so they can be stopped at the source.
- Event Logs show what Curve sent to LinkedIn Ads and what LinkedIn accepted.
- Attribution is kept through booking tools, so a booked appointment is credited to the ad that brought the patient in, even when it is made days later.
- A HIPAA-compliant setup done by Curve's team, in about a week, with a BAA signed on every plan.
Book a call with Curve and Curve's team will walk through your tracking setup with you.
Frequently asked questions
Does LinkedIn Ads sign a BAA?
No. LinkedIn's Ads Agreement says you will not transfer Sensitive Data to LinkedIn, including by installing the Insight Tag on a page that collects medical data. In LinkedIn's words: “You will also not transfer to LinkedIn any data that you know or reasonably should know was (1) collected from or about children under the age of 16, or (2) constitutes Sensitive Data, including by way of installing the Insight Tag on a page that collects medical, financial, or other Sensitive Data about identified or identifiable individuals.” We checked LinkedIn's own pages on October 1, 2026.
Can I send LinkedIn data about patients?
Not health information. LinkedIn's own terms rule it out, as quoted on this page. Send LinkedIn Ads conversions with neutral event names and hashed identifiers, and nothing that reveals a condition or a treatment.
Can a healthcare business still track LinkedIn Ads conversions?
Yes, when the conversion carries no health information. Curve Compliance sends LinkedIn Ads conversions server-side, in place of the Insight Tag, with neutral event names and identifiers hashed with SHA-256 to LinkedIn's requirements.
Does Curve Compliance sign a BAA?
Yes. Curve Compliance signs a BAA on every plan, and Curve's team does the HIPAA-compliant setup in about a week. Book a call to get started.
Sources
Last checked . Vendors change their plans and terms, so confirm the current terms with LinkedIn before you send it patient data.
Related tools
- Does Meta sign a BAA?Does not sign a BAA. Business Tools Terms bar health information.
- Does Google Ads sign a BAA?Does not sign a BAA. Google Ads call terms disclaim HIPAA.
- Does Microsoft Advertising sign a BAA?Does not sign a BAA. No BAA for UET; keep UET off HIPAA pages.
- Does TikTok sign a BAA?Does not sign a BAA. Business terms bar health information.
- Does Google Tag Manager sign a BAA?No public statement. Use Policy bars personally identifying data.
Track ad conversions under a BAA
Curve signs a BAA on every plan. Curve's team sets up HIPAA-compliant conversion tracking for you in about a week, sending conversions server-side in place of pixels.
Book a call