How To Collect More On Every Call Increase collections on every call by following some basic advice. Read More The Revenue Maximizer Get maximum payout with fast, easy, secure billing using our revenue maximizer system.

HIPAA - Compliance

AmbuBill has rigorous HIPAA and Red Flag Rule compliance policies in place to safeguard the integrity and security of your data.

We are responsible for the security of all of the patient information we create, receive, or use under both the Privacy Regulations (Privacy Rule) and the Security Regulations (Security Rule) of the Health Insurance Portability and Accountability Act of 1996 (HIPAA).

Our policies and procedures cover the following areas:

• Identifying threats and potential threats to the security of our electronic information system and computer network through security risk assessments. This includes ensuring the confidentiality, availability and integrity of protected health information (PHI) stored in non-electronic formats such as paper, and electronic protected health information (e-PHI), the health information stored in our computer system.

• Protecting against any reasonably anticipated threats or hazards to the security or integrity of the information we collect through administrative, physical, and technical safeguards.

• Employing an Information Security Officer to ensure that AmbuBill complies with all HIPAA security policies and maintains the confidentiality of all e-PHI, billing information, essential patient information, and confidential information stored electronically.

• Enacting proper discipline for any staff members who violate our policies. Discipline may include counselling, suspension, or termination, depending on the severity of the infraction

• Only hiring people who are sensitive to patient privacy and ensuring that all staff who work with e-PHI are supervised by the appropriate manager.

• Safeguarding the privacy of patient information, and allowing access only for qualified staff on a need-to-know basis.

• Ensuring that information obtained about any patient is used for treatment, payment, or healthcare operations purposes and nothing else, except where permitted under HIPAA. Relevant conversations about a patient account with other professionals are allowed but efforts are always made to prevent others from hearing sensitive information.

• Enacting stringent authentication procedures for access to electronic systems and for access to our facilities.

• Putting in place contingency plans to secure data in the event of an emergency or disaster.

• Putting in place comprehensive activity reviews, system audits, and backup procedures.

• Implementing an Identity Theft Prevention Program with procedures to identify, detect, and respond to “Red Flags.”

• Implementing a policy for all staff to follow if a breach of electronic systems is suspected or has occurred.

For full details on AmbuBill’s HIPAA and Red Flag Rule compliance, please consult the attached PDF.