HIPAA Compliance

Our Commitment to HIPAA Compliance

ResearchMagnify is committed to maintaining the highest standards of data security and privacy, especially when handling Protected Health Information (PHI). We comply with the Health Insurance Portability and Accountability Act (HIPAA) requirements.

HIPAA Safeguards

Administrative Safeguards

• Designated Privacy Officer and Security Officer
• Regular staff HIPAA training and certification
• Written policies and procedures for PHI handling
• Incident response and breach notification procedures

Physical Safeguards

• Secure facility access controls
• Workstation security measures
• Secure disposal of PHI-containing materials

Technical Safeguards

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication for system access
• Automatic logoff and session timeout features
• Audit logs and access monitoring
• Regular security updates and vulnerability assessments

Business Associate Agreements

For clients working with PHI, we execute Business Associate Agreements (BAAs) as required under HIPAA. Our BAAs outline:

• Permitted uses and disclosures of PHI
• Safeguards for protecting PHI
• Breach notification requirements
• Termination procedures
• Liability and indemnification

Data Breach Response

In the unlikely event of a data breach involving PHI, we have established procedures to:

• Immediately assess and contain the breach
• Notify affected clients within required timeframes
• Provide breach details and mitigation steps
• Report to appropriate authorities as required
• Implement corrective actions to prevent future breaches

Contact Our Privacy Team

For questions about our HIPAA compliance or to request a Business Associate Agreement:

Privacy Officer
Email: privacy@researchmagnify.com
Phone: (800) 555-1234