On its own, Google Analytics isn't HIPAA compliant. That's because it's designed to track user behavior and can potentially collect Protected Health Information (PHI), which is a big no-no under HIPAA. However, with some tweaks, you can make your Google Analytics HIPAA-compliant. Make sure to turn off data-sharing settings and disable all data collection for advertising features. Then, anonymize IP addresses and don't send any PHI to Google Analytics. Be careful about what data you track and avoid using identifiable information.