Business Associate Agreements
Before we access PHI, we sign a Business Associate Agreement (BAA) with the client that sets out how the information may be used and protected.
Minimum necessary access
Team members receive individual accounts with access only to the systems and information their role requires. Access is removed promptly when no longer needed.
Training
Everyone who works with PHI is trained on HIPAA privacy and security requirements and on our internal procedures before they begin, with regular refreshers.
Secure working practices
PHI is accessed only through client-approved systems. It is not stored on personal devices, shared through personal email or messaging apps, or kept longer than required.
Incident response
Suspected security incidents are escalated immediately, investigated and reported to the client as required by the BAA and applicable law.
Questions? Email info@lytnetwork.com.