HIPAA, handled

Why it matters to you

If patient names, records or case details pass through your systems, HIPAA applies to you. That includes the labs, billing companies and other vendors that work with a practice, not only the practice itself. The fines are real, but the bigger risk is a breach you cannot explain to your patients or customers.

Most small IT shops wave at HIPAA. We build the technical safeguards in from day one and give you the paperwork that proves it. Both of us worked in the medical field before IT, so we know what patient privacy means on the floor, not only on paper.

Kintech does not make your business HIPAA compliant by itself. Compliance is your program. We give you the technical safeguards and the documents that show them.

What we put in place

• Business Associate Agreement signed before we start
• Security risk assessment in writing, updated every year
• Encryption on every laptop, desktop, server and backup
• Multi factor sign in on email and remote access
• One named account per person, access limited to the role, removed the day someone leaves
• Activity logs kept and reviewed
• Short written policies that fit an office your size
• Staff security training once a year
• A tested backup that brings you back after ransomware or a dead server