Will Dermani Medspa provide its Notice of Privacy Practices to the Business Associate upon request?
Dermani_Medspa Franchise · 2025 FDDAnswer from 2025 FDD Document
IV. Provisions for Covered Entity to Inform Business Associate of Privacy Practices and Restrictions
- a. Notice of Privacy Practices. Covered Entity will provide Business Associate, upon request, with Covered Entity's Notice of Privacy Practices in effect at the time of the request.
- b. Revocation of Permission. Covered Entity will provide Business Associate with any changes in or revocation of permission by an Individual to use or disclose PHI to the extent such changes may affect Business Associate's permitted or required uses and disclosures.
- c. Restrictions on Use and Disclosure. Covered Entity will notify Business Associate of any material restriction to the use or disclosure of PHI that Covered Entity has agreed to in accordance with 45 C.F.R. § 164.522, to the extent such restrictions may affect Business Associate's use and disclosure of PHI.
V. Obligations of the Covered Entity
Covered Entity will not request Business Associate to use or disclose PHI in any manner that would not be permissible under the Regulations if done by Covered Entity.
Source: Item 23 — RECEIPTS (FDD pages 66–311)
What This Means (2025 FDD)
According to Dermani Medspa's 2025 Franchise Disclosure Document, Dermani Medspa, as the Covered Entity, will provide its Business Associate with the Covered Entity's Notice of Privacy Practices in effect at the time of the request, should the Business Associate request it. Dermani Medspa will also provide the Business Associate with any changes or revocation of permission by an individual to use or disclose Protected Health Information (PHI) to the extent such changes may affect the Business Associate's permitted or required uses and disclosures.
Dermani Medspa will also notify the Business Associate of any material restriction to the use or disclosure of PHI that Dermani Medspa has agreed to in accordance with 45 C.F.R. § 164.522, to the extent such restrictions may affect Business Associate's use and disclosure of PHI. Dermani Medspa will not request the Business Associate to use or disclose PHI in any manner that would not be permissible under the Regulations if done by Dermani Medspa.
These provisions are in place to ensure compliance with HIPAA regulations and to protect patient privacy. As a franchisee, it is important to understand these obligations and to maintain compliance with all applicable privacy laws. Franchisees should ensure they have systems in place to manage and protect PHI and to promptly implement any changes or restrictions communicated by Dermani Medspa.