HIPAA rules technically apply only to "covered entities"—health plans, clearinghouses, and certain health care providers. Many of these covered entities engage other businesses, called "business associates", to help carry out their day-to-day business functions.
The HIPAA Privacy Rule allows for protected health information to be disclosed to business associates only if assurances are made that the business associate will adhere to specific guidelines to safeguard and avoid misuse of the shared PHI. These assurances can be made through a business associate agreement (BAA). For more information about business associates and BAAs, visit HHS.gov.
TherapyNotes, as a business associate for your practice, has developed a BAA to help you adhere to these HIPAA guidelines. This must be signed and uploaded in order for practices using TherapyNotes to remain HIPAA compliant.
To download, sign, and upload the Business Associate Agreement:
- Click the User Icon > Settings > TherapyNotes Subscription
- Under Practice Documents and Agreements, click To be HIPAA compliant, a BAA must be signed. Additional instructions will appear.
- Click the download our Business Associate Agreement link to download a PDF of our BAA.
- Electronically sign the BAA using your preferred PDF reader, or print, sign, and scan the signed BAA.
- Click the Upload Signed BAA button and upload the signed BAA.
TherapyNotes autofills your practice name on the BAA. To change the name that appears on the BAA, click the User Icon Settings Practice Information and edit the Practice Name field.