How will Brightstar Care and the franchisee work together to determine the applicability of Privacy Laws?
Brightstar_Care Franchise · 2025 FDDAnswer from 2025 FDD Document
Recitals
- A. BrightStar arranges for certain products and services (the "Services") as a franchisor, to Covered Entity as a franchisee, as set forth in the BrightStar Franchising, LLC Agency Franchise Agreement between Covered Entity and BrightStar ("Franchise Agreement").
- B. The Parties' performance under the Franchise Agreement may or will require Covered Entity to disclose and/or provide to Business Associate private and/or protected health and/or medical information as defined under, and governed by, applicable state law and Individually Identifiable Health Information and/or Electronic Protected Health Information as defined in the Health Insurance Portability and Accountability Act ("HIPAA"), the Health Information Technology for Economic and Clinical Health Act ("HITECH"), and/or regulations promulgated under such laws (state law, HIPAA, and HITECH are hereafter referred to collectively as "Privacy Laws") and may or will require BrightStar to receive, access, review, maintain, retain, modify, record, store, forward, produce, hold, use, create, disclose, and/or destroy such information (the "PHI").
- C. BrightStar's performance of the Services may give rise to certain legal obligations under Privacy Laws and BrightStar may be considered a "business associate" and franchisee may be a "covered entity" as those terms are defined in 45 C.F.R. § 160.103. This Agreement will not apply to relationships between the parties where BrightStar is not considered a "business associate" as defined in 45 C.F.R. 160.103.
Source: Item 22 — CONTRACTS (FDD pages 117–118)
What This Means (2025 FDD)
According to Brightstar Care's 2025 Franchise Disclosure Document, Brightstar Care and the franchisee, also referred to as the 'Covered Entity,' acknowledge that their performance under the Franchise Agreement may require the franchisee to disclose private and protected health information. This information is governed by applicable state law, the Health Insurance Portability and Accountability Act (HIPAA), and the Health Information Technology for Economic and Clinical Health Act (HITECH), collectively known as 'Privacy Laws.'
Brightstar Care's role as a franchisor arranging services may lead to legal obligations under Privacy Laws, potentially classifying Brightstar Care as a 'business associate' and the franchisee as a 'covered entity' as defined in federal regulations. However, the agreement between Brightstar Care and the franchisee only applies when Brightstar Care is considered a 'business associate' under these regulations. This means that the applicability of Privacy Laws and the specific obligations outlined in the Business Associate and Confidentiality Agreement depend on the nature of the services provided and the legal definitions under HIPAA, HITECH, and relevant state laws.
In essence, Brightstar Care and the franchisee recognize the potential for handling protected health information and agree to abide by Privacy Laws when Brightstar Care acts as a business associate. The agreement clarifies that the specific terms and conditions related to privacy and confidentiality are contingent upon the legal classification of their relationship under relevant regulations. This ensures that both parties are aware of their responsibilities and obligations regarding protected health information, but only when those obligations are legally triggered.