What is a Business Associate Agreement (BAA)?
A Business Associate Agreement (BAA) is a legal contract required by the Health Insurance Portability and Accountability Act (HIPAA) that establishes the responsibilities and obligations of "business associates" when handling Protected Health Information (PHI). As a healthcare provider using Tenor Therapy, you're considered a "covered entity" under HIPAA, and Tenor Therapy acts as your "business associate."
How do I get a BAA with Tenor?
Tenor automatically establishes a Business Associate Agreement with you when you create your account. The BAA takes effect immediately upon signup, with no additional steps or separate documents required. This seamless process ensures your practice maintains HIPAA compliance from day one.
This streamlined approach allows you to focus on your practice while Tenor handles the compliance documentation on your behalf.
Tenor's Obligations as Your Business Associate
As your business associate, Tenor Therapy commits to:
Limited Use and Disclosure: We only use or disclose PHI as permitted by the BAA, our Services Agreement, or as required by law.
Appropriate Safeguards: We implement appropriate safeguards and comply with HIPAA Security Rule requirements to protect your PHI, particularly electronic PHI.
Breach Notification: We promptly report any unauthorized use or disclosure of PHI, including breaches of unsecured PHI as required by regulations.
Subcontractor Management: We obtain written assurances from any subcontractors handling PHI that they will adhere to the same restrictions and conditions.
Regulatory Compliance: We make our internal practices, books, and records available to the Secretary of Health and Human Services for compliance determinations.