Notice of Privacy Practices

ABA AuditShield is a Business Associate under HIPAA. We process Protected Health Information ("PHI") on behalf of ABA agencies (the "covered entities") that have engaged us under a Business Associate Agreement. The covered entity is the source of the Notice of Privacy Practices that governs its own use and disclosure of your PHI; this Notice describes how we, as their Business Associate, handle PHI.

• For the covered entity's treatment, payment, and operations only as directed by them.
• To our subcontractors performing services on our behalf, each bound by a BAA.
• As required by law, including in response to valid subpoenas or court orders.
• To prevent or report a breach of unsecured PHI as required by the HIPAA Breach Notification Rule.

We do not sell PHI, use it for marketing, or use it to train artificial intelligence models outside of providing the Service to your covered entity.

• Right to access and obtain a copy of your PHI.
• Right to request amendments to your PHI.
• Right to an accounting of disclosures made for non-routine purposes.
• Right to request restrictions on certain uses and disclosures.
• Right to request confidential communications.
• Right to be notified of a breach of unsecured PHI.
• Right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights without fear of retaliation.

To exercise any of these rights, please contact the covered-entity agency that provided your care. They will coordinate with us as needed.

We are required by law to maintain the privacy and security of PHI, to provide this Notice of our legal duties and privacy practices, to follow the terms of the Notice currently in effect, and to notify affected individuals following a breach of unsecured PHI.

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already maintain as well as any PHI we receive in the future. The current Notice is posted at /notice-of-privacy-practices.

Privacy Officer · privacy@abaauditshield.com