Contract review for healthcare legal teams
Check every BAA and vendor agreement against HIPAA before it is signed, with each gap tied to the rule it comes from.
Where healthcare agreements slow down
BAAs arrive on vendor paper
Every imaging, billing and software vendor sends its own business associate agreement, and each one has to be read against HIPAA from the first line.
PHI terms hide in the main agreement
Data use, breach notice and subcontractor terms often sit in the MSA, not the BAA, so a BAA review alone misses them.
State laws go further than HIPAA
Health privacy laws in states like Washington and California cover consumer health data that HIPAA does not.
Every BAA checked against HIPAA
Proviso checks each requirement in the agreement, cites the section of 45 CFR it comes from and suggests a clause from your HIPAA playbook for anything missing.
Rules Proviso checks for healthcare
Proviso signs a BAA with every healthcare customer.
HIPAA Privacy Rule
Permitted uses and disclosures, and access to and amendment of PHI
HIPAA Security Rule
Safeguards for electronic PHI, and the same terms for subcontractors
Breach Notification Rule
Who reports a breach of unsecured PHI, to whom and how fast
42 CFR Part 2
Extra limits on substance use disorder treatment records
Washington My Health My Data Act
Consent and use limits for consumer health data outside HIPAA
