HIPAA and the business associate agreement

Althio’s role

A practice using Althio is a covered entity under HIPAA. Althio handles protected health information on the practice’s behalf, so it is the practice’s business associate.

The business associate agreement

Althio signs a business associate agreement (BAA) with every practice before any patient information is shared. The agreement sets out how Althio protects the information, what it may use it for, and what happens if something goes wrong.

What the agreement covers

• How Althio uses and discloses protected health information
• The safeguards Althio keeps in place
• Notice to the practice if there is a breach
• The return or deletion of information when the agreement ends
• The subprocessors that handle information for Althio, each under its own agreement

Getting the agreement

The BAA is part of the agreement a practice signs with Althio. To review it before a demo, contact us.

Subprocessors

Companies that handle protected health information for Althio do so under their own business associate agreements. See Subprocessors.