Legal / Service Terms / Business Associate Agreement
Business Associate Agreement (BAA)
The Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the regulations issued under HIPAA are a set of U.S. healthcare laws that establish requirements for the use, disclosure, and safeguarding of individually identifiable health information. The scope of HIPAA was extended with the enactment of the Health Information Technology for Economic and Clinical Health (HITECH) Act in 2009.
HIPAA applies to covered entities (specifically, health care providers, health plans, and health care clearinghouses) that create, receive, maintain, transmit, or access patients’ protected health information (PHI). HIPAA further applies to business associates of covered entities that perform certain functions or activities involving PHI as part of providing services to the covered entity or on behalf of the covered entity.
When a covered entity engages the services of a service provider, such as LISS, the service provider would be a business associate under HIPAA.
- Business Associate Agreement – Last Updated 10/01/2022 [View]
Frequently Asked Questions – LISS BAA
Can my organization enter into a BAA with LISS?
Yes. LISS offers its covered entity and business associate customers a Business Associate Agreement that covers LISS services. The LISS HIPAA Business Associate Agreement is available by default to all customers who are covered entities or business associates under HIPAA.
Does having a Business Associate Agreement with LISS ensure my organization’s compliance with HIPAA and the HITECH Act?
No. By offering a Business Associate Agreement, LISS helps support your HIPAA compliance. However, using LISS services does not on its own achieve HIPAA compliance. Your organization is responsible for ensuring that you have an adequate compliance program and internal processes in place, and that your particular use of LISS services aligns with your obligations under HIPAA and the HITECH Act.
Can LISS use my organization’s Business Associate Agreement?
No, LISS cannot use a customer’s Business Associate Agreement. Because we offer multitenant services that are standardized for all our customers, we must operate in a consistent manner. The LISS HIPAA Business Associate Agreement closely reflects how we operate. Accordingly, in order to address the needs of the healthcare industry, LISS has created a Business Associate Agreement that aligns with our scale service offerings and meets the needs of customers.
