HIPAA compliance & healthcare privacy.
Clear expectations come before sensitive information. Understand the privacy requirements for your engagement before sharing any patient data.
Who HIPAA applies to.
HIPAA applies to covered entities and their business associates. Its Privacy, Security and Breach Notification Rules address the protection of health information. Where these rules apply, compliance involves organizational practices and safeguards, not simply the software a business uses.
Before an engagement involves patient data.
Confirm the permitted work, who may access information, the systems involved and each party’s responsibilities. A business associate agreement must be in place where required. Appropriate safeguards, workforce practices and incident procedures also need to be established. Ask the team to confirm the arrangements for your specific engagement in writing.
Keep enquiries free of patient information.
Use this website’s forms for business questions only. Do not include patient names, medical records, dates of birth, insurance information or other protected health information. The operations portal in this release supports business administration and is not approved to receive patient information.
Discuss your requirements with us.
Tell us about your administrative workflow without identifying patients. Specific privacy commitments, contractual requirements and suitable systems must be confirmed before work involving protected health information begins. This page explains considerations for an engagement; it does not certify Bill Wave’s HIPAA compliance.
Read the requirements.
Make the
connection.
Bring one challenge. We’ll start with the people involved, the work that needs to happen and what a useful next step could be.
Start a conversation