LNC Blueprint™ Business Associate Agreement (BAA)

A product of SELNA Consulting, LLC, d/b/a “LNC Blueprint™”
Effective Upon Customer Acceptance at Checkout

1. Purpose and Parties

This Business Associate Agreement (“Agreement”) is entered into by and between:

Business Associate: SELNA Consulting, LLC, doing business as “LNC Blueprint™” (“LNC Blueprint™,” “we,” “our,” or “us”), and

Covered Entity: The person or entity accepting this Agreement (“Customer” or “you”).

By checking the acceptance box during sign-up, Customer enters into this Agreement with LNC Blueprint™ as required under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”) and related regulations.

2. Definitions

PHI: Protected Health Information as defined in HIPAA.

HIPAA Rules: Privacy, Security, Breach Notification, and Enforcement Rules.

Breach: Unauthorized acquisition, access, use, or disclosure of PHI that compromises its security or privacy.

3. Obligations of LNC Blueprint™ (Business Associate)

We agree to:

• Use or disclose PHI only as permitted by this Agreement or as required by law.

• Implement administrative, physical, and technical safeguards to protect PHI, including encryption in transit and at rest.

• Ensure subcontractors who have access to PHI are bound by the same restrictions.

• Report any security incident or Breach involving PHI to Customer within five (5) business days of discovery.

• Make PHI available to Customer as necessary to meet HIPAA access, amendment, and accounting requirements.

• Upon termination, return or securely destroy all PHI, unless retention is required by law.

4. Obligations of Customer (Covered Entity)

You agree to:

• Use the LNC Blueprint™ platform in accordance with HIPAA.

• Restrict PHI storage to HIPAA-enabled areas of the platform.

• Train your workforce on HIPAA compliance and limit LNC Blueprint™ access to authorized personnel.

• Secure PHI outside of the LNC Blueprint™ platform (e.g., on devices, in paper form, via non-secure email or text).

• Promptly notify us of any suspected Breach originating in your own operations.

5. Permitted Uses and Disclosures

We may use or disclose PHI solely:

• To provide the LNC Blueprint™ services to you.

• For our proper management and administration.

• As required by law.

6. Allocation of Responsibility

LNC Blueprint™ is responsible for PHI security within the HIPAA-enabled platform environment we provide. Customer is solely responsible for HIPAA compliance in all other aspects of their business, including any use of PHI outside the platform.

7. Term and Termination

• Term: This Agreement begins upon your acceptance at checkout and continues until your LNC Blueprint™ subscription ends.

• Termination for Cause: Either party may terminate if the other materially breaches this Agreement and fails to cure within thirty (30) days.

• Effect of Termination: Upon termination, we will return or destroy all PHI, unless retention is legally required.

8. Governing Law

This Agreement is governed by the laws of the State of Florida and applicable federal HIPAA regulations.

9. Acceptance

By checking the acceptance box during sign-up, you:

• Represent that you are authorized to accept this Agreement on behalf of your organization.

• Agree that this Agreement is executed and effective as of the date you check the box upon checkout.