Transcript
Does your agency really need to be HEPA compliant inside GoHigh Level? Let's find out. Hey guys, my name is Joanna, your gole certified admin, systems architect, and the person who will save you from the HEPA headache you didn't even know you're going to walk into. Like, I know how it feels, right? But before we jump in, a quick disclaimer for those of you who are watching us. This video is for educational purposes only. I'm not providing any legal advice and you should always consult and have a complete full HEPA risk assessment for your agency especially if you're catering in this type of industry that require this one. All right. So this is one of the most confusing topic at times and wondering whether do you really need this for your agency. So let's get into it. Now mostly we assume that HEPA only applies to doctors or giant medical groups right but the real question isn't who you serve it's whether you touch any patient data and yes most agency who's really handling in the medical or healthc care space might be touching this without even realizing it. So there are two categories in the HEPA universe. So this is what you call the covered entity. So the people who bill insurance and then this is what you call another one is the business associate that's agencies or people who have access to the patient information if your client bills insurance like dentist physician uh pts chiropractor you're automatically part of the HEPA conversation so if they use go high level for their marketing campaigns even cash pay meda or small practices often expect HEPA compliance because it's considered like a standard healthcare practices within the industry. Now let's talk access. So if you build for example funnels, you run lead um re lead generation, you set up calendar, send SMS, even email campaigns, um bed forms, reactivation campaign or manage the CRM automation using go high level, you are absolutely touching the patient information. Now patient information is just is not just medical charge. It's any unique identifiers like name, email, phone numbers, appointment information, even IP addresses, right? And once someone becomes a patient, you cannot actually take that back or detach the data. It all counts. So this is where actually go high level becomes a lifesaver. So if you don't know, go high level actually HEPA um offers a HPA compliant upgrade that encrypts all your data hosts everything in a compliant environment environment that provides a sign BAA. So it actually covers like the whole entity of your agency like the agency right all the sub accounts. um something that is used to be nearly impossible like bigger companies they pay enterprise fee for this like mail gunio I think HubSpot as well but here's the biggest myth though that you need to really remember turning on the HEPA mode and go high level does not make your agency HEPA compliant it only makes the platform compliant so there is still a need for you as a business to protect yourself. Here are some things that you need to do when you do this. You need a full HEPA risk assessment. You need a written policy and procedures that is documented. You need to train your staff and document the sign off. You need the business associate agreement. That's a BAA. The incident response plan. How are you going to address it? the disaster recovery protocol if you are going to put this in place. So you are only fully protected when both exist. High level is compliant and your agency administrative requirements are complete. So the real answer, okay, if you are wondering if your client's bill insurance, yes, you need HEPA. If you touch any patient data um data, yes, you need HEPA. If you only build websites and never touch a lead just like the front end, probably not. If you serve like Med Spa, chiropractor who expect um HEPA, it's smart to actually have this one in your business. HEPA isn't a fear tactic. It's a basically like a shield to protect your business and the clients who trust you. Another thing is that you need to be mindful if you activate this inside go high level and if that client moved on and got out of your agency account, you can no longer um deactivate or stop paying for that HEPA compliant fee that is on top of your agency subscription um in go high level. So for example, if you are in the highest tier, there's an add-on of 297. You can mark that up. you can rebuild that one per uh per client under the sub account and then after that if that sub account actually no longer need your marketing services to help them generate more lead and patient you will still continue paying that one because that is like a locked in that will happen unless you terminate your whole sub account and you no longer want to have that one then you can no longer do that but the good thing about it like what I've mentioned is that if you get the h the HEPA compliant as a platform for go high level and you actually add your your companies or agency's HEPA documentation then you can use that one as your marketing tool. So I hope this actually helped you out and give you a little bit more clarity when it comes to the go high level HEPA compliant services and how your agency should be able to leverage it. And if you find this useful, go ahead and subscribe. And I'm so happy that you are here in our channel. And stay tuned with all other GoHigh level trainings and tutorials that you can find here. Till next time.