HIPAA rules technically apply only to "covered entities"—health plans, clearinghouses, and certain health care providers. Many of these covered entities engage other businesses, called "business associates", to help carry out their day-to-day business functions.
The HIPAA Privacy Rule allows for protected health information to be disclosed to business associates only if assurances are made that the business associate will adhere to specific guidelines to safeguard and avoid misuse of the shared PHI. These assurances can be made through a business associate agreement (BAA). For more information about business associates and BAAs, visit HHS.gov.
TherapyNotes, as a business associate for your practice, has developed a BAA to help you adhere to these HIPAA guidelines. This must be signed and uploaded in order for practices using TherapyNotes to remain HIPAA compliant.
Role Required: Practice Administrator
Tip: The maximum file size for uploading a scanned BAA is 25MB. To stay below the maximum file size, we recommend scanning your document at no higher than 150 dpi. For more information, read Tips for Scanning Documents and Reducing File Size.
TherapyNotes autofills your practice name on the BAA. To change the name that appears on the BAA, click the User Icon > Settings > Practice Information and edit the Practice Name field.
Last updated on July 14, 2022
