Our Commitment to HIPAA
Alaric Health Services is committed to protecting the privacy, confidentiality, integrity, and security of information entrusted to us through our medical billing and revenue cycle management (RCM) services.
Where Alaric Health Services performs functions that involve protected health information (PHI) on behalf of a covered entity or other healthcare organization, our responsibilities are governed by applicable law, contractual requirements, and applicable HIPAA obligations.
HIPAA Training Credential
Alaric Health Services maintains documented HIPAA-related training as part of its commitment to privacy, confidentiality, and responsible handling of healthcare information.
HIPAA Training for Healthcare Professionals
Training credential awarded to Alaric Health Services.
HIPAA Training for Healthcare Professionals — Awarded August 21, 2018.
What Is Protected Health Information?
Protected Health Information (PHI) generally refers to individually identifiable health information that is created, received, maintained, or transmitted by a covered entity or business associate and is protected under HIPAA.
Depending on the services provided to a healthcare client, information processed through medical billing and RCM activities may include information associated with patients, claims, insurance, billing, eligibility, and reimbursement.
Administrative Safeguards
Administrative safeguards are an important part of our privacy and security program.
- Security and privacy policies and procedures.
- Risk management practices.
- Workforce privacy and security awareness.
- Appropriate access management procedures.
- Incident response and escalation processes.
- Ongoing review and improvement of security practices.
Technical Safeguards
Appropriate technical controls are used to help protect electronic information and limit unauthorized access.
Access Controls
Access to systems and information is controlled according to authorized business needs and applicable requirements.
Authentication
Appropriate authentication and account-management practices are used to help prevent unauthorized access.
System Monitoring
Security-related activity may be monitored and reviewed as appropriate to support the protection of information.
Data Protection
Appropriate safeguards are used to help protect information during storage and transmission.
Physical Safeguards
Physical security measures are part of our overall information security approach and are designed to help prevent unauthorized physical access to systems and information.
Access to facilities, equipment, workstations, and information resources is managed according to applicable organizational security policies and requirements.
Access Management
Access to sensitive information is limited to authorized personnel who require access to perform legitimate business responsibilities.
- Role-based access where appropriate.
- Access authorization procedures.
- Account management and access review.
- Removal or modification of access when responsibilities change.
- Security awareness and confidentiality expectations.
Workforce Privacy & Security
Personnel with responsibilities involving sensitive information are expected to follow applicable privacy, confidentiality, and information-security policies.
Security awareness and training practices help personnel understand their responsibilities for protecting confidential and healthcare-related information.
Risk Management
Information security risks can change as technology, threats, business operations, and regulatory requirements evolve.
Alaric Health Services maintains processes intended to identify, evaluate, and address security risks associated with its operations and information systems.
Business Associate Responsibilities
When applicable, Alaric Health Services may act as a business associate to healthcare organizations in connection with medical billing, revenue cycle management, claims processing, or related services.
Where a business associate relationship exists, the parties' responsibilities concerning PHI are governed by applicable HIPAA requirements and the applicable Business Associate Agreement (BAA).
We work with clients and applicable service providers to support appropriate handling and protection of PHI within the scope of our contractual and legal responsibilities.
Secure Communication
Because public website forms and ordinary email are not intended for every type of sensitive healthcare information, visitors should not submit unnecessary PHI through general website contact forms.
Clients should use the secure communication methods designated by Alaric Health Services for authorized exchange of sensitive information.
Incident & Breach Response
Alaric Health Services maintains processes for identifying, evaluating, responding to, and documenting potential security incidents according to applicable policies, contractual requirements, and law.
Where HIPAA breach-notification requirements apply, applicable notification and response obligations are addressed in accordance with applicable law and contractual responsibilities.
Data Retention & Disposal
Information is retained and disposed of according to applicable business, legal, contractual, and regulatory requirements.
Appropriate safeguards are used when information is no longer required and is eligible for secure disposal.
Client Responsibilities
Healthcare clients and business partners also have important responsibilities when sharing information with Alaric Health Services.
- Provide only information reasonably necessary for the requested service.
- Use approved secure communication channels for sensitive information.
- Maintain appropriate authorization and consent where required.
- Protect account credentials and system access.
- Notify appropriate contacts of suspected security incidents.
Third-Party Service Providers
Certain technology and business functions may be supported by third-party service providers.
Where applicable, vendors and service providers are evaluated and managed according to our business, security, contractual, and regulatory requirements.
Continuous Improvement
Privacy and security are ongoing responsibilities. Alaric Health Services may periodically review and improve its policies, procedures, controls, training, and security practices to address evolving risks and applicable requirements.
Important HIPAA Notice
This page provides general information about Alaric Health Services' approach to privacy and information security. It does not replace any applicable Business Associate Agreement, contractual security requirements, formal HIPAA policies, procedures, or legal obligations.
HIPAA obligations may vary depending on the role performed, services provided, information involved, and applicable agreements and laws.
Contact Us
Alaric Health Services
Business: Medical Billing & Revenue Cycle Management (RCM)
Email: alarichealthservices@gmail.com
For questions regarding privacy, information security, or our HIPAA-related practices, please contact us using the email address above.