An intro to HIPAA compliance for startups.

1. HIPAA Compliance for Startups
HIPAA 101: Survival tips for startups beginning their
journey in healthcare

2. What is it?
HIPAA is a set of guidelines that
outline how patient information is
to be stored and transmitted.

3. What HIPAA stands for
Health Insurance Portability and Accountability Act
Legislation that provides guidance on how electronic patient
health information can be stored and protected.
Medications
Clinical notes
Insurance
Blood tests
MRI scan, etc.
Uniquely Identifiable
Information
Name
Email
Social security number
Driver’s license
Photographs, etc.
Health Information

4. Security Rule
Privacy Rule
Enforcement Rule
Breach Notification Rule
Main points about HIPAA

5. The Security Rule and the
Privacy Rule
Security Privacy
Standards for the securing and
transmission of healthcare information
Protection of individually identifying
information (SSN, name, email, etc.)

6. The Enforcement Rule and the
Breath Notification Rule
Enforcement Rule Breach Notification
Establishes how regulators will determine
liability and calculate fines for
HIPAA violations
Requires entities to provide immediate
notification to HHS if a breach affects
more than 500 patients

7. Who does HIPAA Apply to?
Covered Entities and Business Associates
Covered Entities
Doctors, Hospitals, Health
Insurers, self-insured employers
Business Associates
A Business Associate is a vendor or
subcontractor who has access to
health information

8. What are my responsibilities
as a startup?
If you’re collecting or storing health information with covered entities,
sign a BAA (Business Associate Agreement). This outlines procedures
for how you will protect health information and how you will respond
in the event that there is a breach.

9. Almost there...

10. What if I violate HIPAA?
Fines can range from $100 to
$50,000 per violation. Annual
maximum penalty for violations is
$1.5 million per year.

11. How can I be compliant?
Accountable will help you remain
compliant with the administrative
aspects of HIPAA
HIPAA compliant hosting and healthcare
integration with non-standard pricing
Train your employees on proper
procedures to protect patient
information
Produce your own BAA agreements
together with policies and procedures
for handling patient information
Can partner with vendors to speed up
integration with EHR providers and
hospitals
Developer-friendly and open-source
resources for your BAA’s and technical
documentation

12. How can I be compliant? Cont.
Simple HIPAA compliant hosting in the
cloud with affordable pricing for startups
Pricing begins at $2,500 for their standard
plan with higher prices for enteprise
Compliance training that is tailored
specific to employee roles
Access to policies and procedures
designed specifically for web and mobile
apps in the cloud
Plenty of documentation for developers
on HIPAA, and True Vault’s capabilities
Privacy and data insurance policy for
customers

13. You made it!
Our explainer is only a start, ensure that you’re always in compliance
and keep up with the latest changes to HIPAA and HITECH.

14. visit us at obaa.io
Obaa