HIPAA Notice of Privacy Practices & Business Associate Agreement

Our Commitment to Privacy

ReCapture is committed to protecting the privacy and security of Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations.

Business Associate Agreement

As a Business Associate under HIPAA, ReCapture enters into a Business Associate Agreement (BAA) with all customers who handle PHI. This agreement outlines our responsibilities and obligations regarding the use and disclosure of PHI.

Key Provisions of Our BAA:

• Use and disclosure of PHI only as permitted by the BAA and HIPAA
• Implementation of appropriate safeguards to prevent unauthorized use or disclosure
• Reporting of any security incidents or breaches
• Ensuring that any subcontractors also comply with HIPAA requirements
• Making PHI available to individuals as required by HIPAA
• Maintaining and making available information required for compliance reviews
• Returning or destroying PHI upon termination of the agreement

How We Protect PHI

ReCapture implements comprehensive safeguards to protect PHI:

Administrative Safeguards:

• Security management process with risk analysis and management
• Workforce security and training programs
• Information access management with role-based controls
• Security awareness and training for all personnel
• Incident response and reporting procedures

Physical Safeguards:

• Facility access controls at our data centers
• Workstation security policies
• Device and media controls

Technical Safeguards:

• Access control with unique user identification and automatic logoff
• Audit controls with comprehensive logging
• Integrity controls to ensure PHI is not improperly altered
• Transmission security with encryption

Your Rights Under HIPAA

As a covered entity, you have the right to:

• Access and obtain copies of PHI
• Request amendments to PHI
• Receive an accounting of disclosures
• Request restrictions on uses and disclosures
• Request confidential communications
• Receive a copy of this notice

Breach Notification

In the event of a breach of unsecured PHI, ReCapture will notify you within 24 hours of discovery. We maintain comprehensive incident response procedures and 24/7 security monitoring.

Business Associate Agreement

Contact Information

For questions about our HIPAA compliance, privacy practices, or to request a customized BAA, please contact our Privacy Officer at: