GoToConnect itself has not been validated as being HIPAA-compliant, though other products in the larger GoTo Suite (like GoToMeeting and GoToWebinar) have.