HIPAA compliance and BAA requirement

Sreeram
Sreeram Posts: 1
edited May 2023 in General questions

As you know, to be on teh safer side, we need HIPAA compliance docs and business associate agreement from any communication software to be used in medical devices in clinical settings. What is TeamViewer's stand on that? Do you even provide those? Are there any conditions etc?

Comments

  • An6reas
    An6reas Posts: 4 [Former Staff]

    Dear Sreeam,

    Thank you for your request. As you wrote certified-security is particularly important for us and our customers.

    Since May 2016, TeamViewer is fully HIPAA (BAA) and HITECH certified. One of its key objectives is to ensure confidentiality and security of protected health information (PHI). HIPAA compliance verifies that physical, network, and process security measures are in in place to protect PHI.

    The Health Information Technology for Economic and Clinical Health Act (HITECH) supplements HIPAA. Its primary concern is to stipulate the penalties for those organizations violating HIPAA rules.

    TeamViewer received the HIPAA, HITECH, and SOC2 certification from A-LIGN, a US nationwide security and compliance provider specializing in helping businesses across a variety of industries navigate the complexities of their specific audit and security assessment needs.

    Regarding the security, find more details on our homepage and the Security Statement:
    https://www.teamviewer.com/en/security/

    More details to the release of HIPAA:

    https://www.teamviewer.com/en/company/press/teamviewers-now-hipaa-hitech-and-soc2-certified/

    Have a data-secure good day!

    Best regards

    Andreas

  • So does that mean you will sign a Business Associate Agreement (BAA) as required for customers who wish to use TeamViewer in a way that maintains compliance with HIPAA?

  • An6reas
    An6reas Posts: 4 [Former Staff]

    Dear jjllcc,

    yes, if you have any inquiries regarding a Business Associate Agreement (BAA), please contact sales@teamviewer.com and we will assist directly.

    Have a good day!

    Best regards

    Andreas

  • Interesting, I tried a few times and was either told NO, or you need half mil in anual spend.

    Here is real response from your sales team:

    We are happy to provide the documentation we have on our HIPAA compliance but unfortunately will not sign a BAA due to liability concerns.

    Is the BAA an absolute requirement on your end?

    Best regards,
    Sales USA & Canada

    P.S. Brought to you by TeamViewer: Monitoring, Asset Management, Anti-Malware, and Backup! Discover ITbrain at www.itbrain.com
    ----------------------------- 
    www.teamviewer.com

    TeamViewer US LLC * 5741 Rio Vista Drive * Largo, FL 33760

  • SOC2 audits are only good for one year.  Is TeamViewer planning to have A-Lign provide another SOC2 audit for 2017-18?