When signing with Dandy, practices agree to the Terms & Conditions within the Practice Agreement. Embedded in these Terms is the Business Associate Agreement (BAA), which outlines how Dandy, as a HIPAA-compliant “Business Associate,” safeguards personal health information (PHI) when supporting practices. This agreement supports the secure handling of PHI, including limiting data access based on role and only disclosing the minimum necessary for billing and essential services.
For details, refer to Dandy’s Terms & Conditions.
Topics Covered:
- Definitions
- Permitted Uses and Disclosures of PHI
- Obligations of Business Associate
- Reportable Events
- Obligations of Covered Entity
- Term and Termination
- IT Policy for Practice-Provided Equipment
- Miscellaneous