HIPAA

Health Insurance Portability and Accountability Act

HIPAA Business Associate Notice

Our Role as Business Associate

Yama Industrials, Inc. acts as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA) when providing services to covered entities and their business associates in the healthcare industry. We execute Business Associate Agreements (BAAs) with healthcare organizations that establish our contractual obligations to maintain HIPAA compliance standards.

Healthcare clients include but are not limited to: hospitals, medical clinics, mental health providers, developmental disability services organizations, insurance providers, healthcare clearinghouses, and other entities regulated under HIPAA.

Protected Health Information Access

Yama Industrials, Inc. may access Protected Health Information (PHI) during the course of providing services to healthcare clients. Our technicians may encounter PHI during:

• IT infrastructure support and system administration

• Device and data migrations

• Cybersecurity related services

• System troubleshooting and technical support

• Compliance advisory services

• Cloud infrastructure support

• Network and communication system support

Such access is incidental to the performance of our contracted services and is limited to what is necessary to complete the work.

Data Retention

Yama Industrials, Inc. does not store, host, or retain copies of client PHI on our servers or off-site infrastructure. Client PHI remains the responsibility and property of the client.

Business Associate Agreements

Healthcare clients may execute a Business Associate Agreement (BAA) with Yama Industrials, Inc. to establish the specific terms, conditions, safeguards, and obligations applicable to the Business Associate relationship. The BAA addresses all HIPAA compliance requirements, permitted uses and disclosures, safeguard specifications, breach notification procedures, and other detailed terms.

Clients are responsible for determining whether a Business Associate Agreement is required for their engagement with Yama Industrials, Inc. based on the nature of services provided and applicable regulatory requirements.

Contact for HIPAA Matters

For questions about our HIPAA Business Associate obligations, Business Associate Agreements, or other HIPAA-related matters, please contact:

Yama Industrials, Inc. 800 Third Avenue #1292 New York, NY 10022

Email: [email protected]