You are not signed in
SendThisFile® HIPAA Compliance
The following information is excerpted from the U.S. Department of Health and Human Services' website. It explains why SendThisFile is not considered a "business associate" under the HIPAA Privacy Rule.OCR HIPAA Privacy
December 3, 2002
Revised April 3, 2003
Background
By law, the HIPAA Privacy Rule applies only to covered entities health plans, health care clearinghouses, and certain health care providers. However, most health care providers and health plans do not carry out all of their health care activities and functions by themselves. Instead, they often use the services of a variety of other persons or businesses. The Privacy Rule allows covered providers and health plans to disclose protected health information to these business associates if the providers or plans obtain satisfactory assurances that the business associate will use the information only for the purposes for which it was engaged by the covered entity, will safeguard the information from misuse, and will help the covered entity comply with some of the covered entitys duties under the Privacy Rule. Covered entities may disclose protected health information to an entity in its role as a business associate only to help the covered entity carry out its health care functions not for the business associates independent use or purposes, except as needed for the proper management and administration of the business associate.
Other Situations in Which a Business Associate Contract Is NOT Required.
X With a person or organization that acts merely as a conduit for protected health information, for example, the US Postal Service, certain private couriers, and their electronic equivalents.
End of excerpt.
| About Us | Site Map | Privacy Policy | Terms of Use | Contact Us |
| Copyright © 2003-2010 SendThisFile, Inc. All rights reserved. |