Compliance
Security for Your Wellbeing
At LifeSpeak, we are committed to maintaining the highest standards of data security and privacy. Our compliance with HIPAA, GDPR, and PIPEDA regulations, along with our successful completion of annual SOC 2 Type 2 audits, demonstrate our dedication to protecting your sensitive information. We prioritize the security, availability, and confidentiality of our systems and data to ensure that our clients can trust us with their most valuable information.
HIPAA Compliance
LifeSpeak is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA), ensuring the protection of sensitive patient health information. Our practices adhere to the strict privacy and security standards set forth by the U.S. Department of Health and Human Services.
For more information on HIPAA, visit: https://www.hhs.gov/hipaa/index.html
SOC 2 Type 2 Certification
We undergo annual SOC 2 Type 2 audits, which evaluate our systems’ security, availability, and confidentiality over an extended period. This rigorous assessment, developed by the American Institute of CPAs (AICPA), ensures that we maintain robust controls to protect your data.
For more information on SOC 2, visit: https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2
GDPR Compliance
LifeSpeak adheres to the General Data Protection Regulation (GDPR), the comprehensive data protection law of the European Union. We have implemented technical and organizational measures to ensure compliance, including data protection by design and default, maintaining records of processing activities, and having procedures in place for data breach notification.
For more information on GDPR, visit: https://gdpr-info.eu/
PIPEDA Compliance
LifeSpeak complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s federal privacy law for private-sector organizations. We have implemented measures to ensure compliance, including appointing a privacy officer, obtaining informed consent for data collection and use, and maintaining a data breach reporting process.
For more information on PIPEDA, visit: https://www.priv.gc.ca/en
For more detailed information on how we handle data, consult our privacy policy.