HIPAA Compliance

MEGA PROMOTING S.R.L. is committed to meeting Health Insurance Portability and Accountability Act (HIPAA) standards for U.S. healthcare sector clients. This page describes our compliance measures for Protected Health Information (PHI). Effective Date: January 1, 2025

HIPAA compliance applies to: Healthcare clients (Covered Entities) Business Associates of covered entities Organizations processing PHI Note: HIPAA compliance is available exclusively for Enterprise plan with signed Business Associate Agreement (BAA).

For clients requiring HIPAA compliance: BAA available upon request for Enterprise plan Defines responsibilities of both parties Specifies security measures Includes breach notification procedures Contact us to negotiate BAA: contact@kallina.info

Administrative safeguards: Designated security officer Mandatory employee training Documented policies and procedures Periodic risk assessments Physical safeguards: Facility access control Workstation security Device and media control Technical safeguards: AES-256 encryption for PHI at rest TLS 1.3 for PHI in transit Role-based access control Complete audit logging Multi-factor authentication

Data minimization: We collect only strictly necessary PHI Limited retention per requirements Secure deletion upon request PHI Access: Only authorized personnel Need-to-know principle Complete access auditing

In accordance with HIPAA Breach Notification Rule: Covered entity notification: Within 24 hours Investigation: Complete within 30 days Documentation: Detailed incident report Cooperation: Assistance with HHS and affected individual notifications

We support exercise of patient rights under HIPAA: Right to access PHI Right to amendment Right to obtain accounting of disclosures Right to request restrictions Right to confidential communications

All our subcontractors who may access PHI: Are subject to security assessments Sign their own BAAs Adhere to the same protection standards

Important: HIPAA compliance requires Enterprise plan BAA must be signed before PHI processing Client is responsible for proper configuration We do not guarantee compliance without active BAA

For questions about HIPAA compliance: MEGA PROMOTING S.R.L. IDNO: 1019600021765 Email: contact@kallina.info (subject: "HIPAA Inquiry") Phone: +373 61 066 888