Under what conditions can a Brightstar Care Business Associate de-identify PHI?

According to Brightstar Care's 2025 Franchise Disclosure Document, a Business Associate, which in this case is Brightstar Franchising, LLC, can de-identify Protected Health Information (PHI) under specific conditions. The agreement between the Covered Entity (the franchisee) and the Business Associate (Brightstar Franchising, LLC) states that the Business Associate may de-identify PHI as defined by and in compliance with Privacy Laws. They can then use this de-identified information as permitted by applicable law. This provision is part of the Business Associate and Confidentiality Agreement outlined in Exhibit M of the franchise agreement.

This means that Brightstar Care franchisees, as Covered Entities, must allow Brightstar Franchising, LLC to de-identify PHI, provided it is done in accordance with all relevant Privacy Laws. The de-identified data can then be used by Brightstar Franchising, LLC, for purposes allowed by law. This is a standard practice to ensure compliance with regulations like HIPAA, which protect sensitive health information while still allowing for data analysis and reporting.

For a prospective Brightstar Care franchisee, this clause ensures that while they must share PHI with Brightstar Franchising, LLC, there are strict rules governing how that information can be used. It also highlights the importance of understanding and complying with all applicable Privacy Laws to avoid potential legal issues. Franchisees should ensure they fully understand their obligations and rights regarding PHI, as outlined in the agreement and relevant regulations.