At Compass, data security is our #1 priority. Both organizations and public workshop participants want to ensure that we are handling their sensitive health-related data in a safe and secure way. HIPAA does a great job at standardizing the rules & regulations that organizations must follow to protect Personal Health Information (PHI).
For organizations using Compass, we need to determine which organizations are Covered Entities under HIPAA. Additionally, for any Covered Entity that uses Compass, a Business Associate Agreement needs to be on file. This agreement is an important step under HIPAA which defines the relationship between Covered Entities and the Business Associates that the entity does business with.
This will be a step-by-step process that Program Coordinators and Partner Managers will soon see when they log into Compass.
If you wish to get a jump-start on this process, you may visit the Covered Entity Status page in Compass here: https://www.compasshp.org/in/ce-status.
Covered Entity Status
Any organization that uses Compass to manage workshops and participants will need to state whether or not they are a Covered Entity under HIPAA. This is an important and legally required step in this process. Soon, when you log into Compass, you will start to see a screen that lists each of your organizations.
We provide you with several links to guidance tools which help you determine your status under HIPAA:
Once you have determined your status. Please select the corresponding "Covered Entity Status" and press continue.
Business Associate Agreement
All Covered Entities that use Compass to manage workshops and participants will need to have a Business Associate Agreement(BAA) on file to create, modify, or view Personal Health Information. Our attorneys have put together a fairly standard BAA that covers all of the necessary requirements under HIPAA. If you answered "This is a Covered Entity" to an organization in the previous step, you will be presented with a form that asks you to provide contact information to the person who should be responsible for reviewing and signing the BAA:
Once you save the Business Associate Agreement form, an email will be generated to the specified contact requesting their signature on the agreement.
If you have any questions regarding this process, please reach out to us at firstname.lastname@example.org.