HIPAA Approach

Our HIPAA approach

WiseMedBilling supports healthcare revenue-cycle workflows with safeguards designed to help protect the confidentiality, integrity, and availability of information. Whether HIPAA applies to a specific engagement depends on the services, information involved, the parties' roles, and the governing agreements.

• When WiseMedBilling acts as a business associate and handles protected health information, responsibilities are defined through the applicable service agreement and Business Associate Agreement.

Security safeguards

Our approach combines administrative, technical, and organizational controls appropriate to the approved workflow and the sensitivity of information being processed.

• Role-based access and least-privilege permissions for authorized personnel.
• Authentication and account-status controls for protected systems.
• Server-controlled data changes and activity records for important actions.
• Secure transmission practices and restricted service-provider access.
• Workforce procedures for credential protection, incident reporting, and access removal.
• Review and improvement of safeguards as systems and risks change.

Public website limitation

The public WiseMedBilling website and consultation form are intended for general provider, practice, and business information. They are not patient portals, clinical communication systems, or emergency services.

• Do not submit patient names, medical record numbers, dates of birth, insurance member identifiers, diagnosis details, treatment information, claim-level patient data, or other patient-identifiable information unless WiseMedBilling has explicitly approved the submission method and the required agreements are in place.

Approved healthcare data workflows

Before protected health information is exchanged, WiseMedBilling and the healthcare organization should confirm the authorized purpose, minimum necessary data, approved users, transfer method, retention expectations, incident contacts, and contractual requirements. Public email or website forms should not replace an approved secure exchange process.

Reporting a concern

If you believe sensitive healthcare information was submitted through an incorrect channel, or you need to report a privacy or security concern, stop further transmission and contact Info@wisemedbilling.com promptly. Do not include additional patient information in the initial report.