Information Controls, Inc. is classified as a HIPAA Business Associate. A HIPAA Business Associate is any person or entity who performs or helps perform a function or activity involving the use or disclosure of protected health information (PHI), and the function or activity is being performed on behalf of a HIPAA covered entity.
HIPAA’s Business Associate Rule requires covered entities to identify their Business Associate and enter into contracts with them to safeguard the privacy of PHI. HIPAA requires all Business Associate Agreements to contain assurance from the Business Associate that it will:
- Not use or disclose PHI other than as permitted by the agreement or required by law;
- Use appropriate safeguards to protect the confidentiality of the information.
Information Controls is considered a Health Care Clearing House - an entity that facilitates the processing of health information from standard to non-standard formats of data, or vice versa.
For a summary of the HIPAA Privacy Rule, please visit HIPAA Privacy Rule on the Department of Health and Human Services website.