Privacy & HIPAA
Policies and workflows aligned with applicable HIPAA requirements.
SECURITY & COMPLIANCEYour patients trust you.
Your patients trust you.
You need to be able to trust us.
Working with a billing partner means trusting another organization with sensitive information, important systems, and parts of the practice you’ve worked hard to build. Privacy and security are built into how we work.
OUR SECURITY FRAMEWORK
A safer, more secure revenue cycle.
We use people, processes, and technology together to help protect the information entrusted to us.
Business Associate Agreements
Appropriate BAAs when required.
Access & Authentication
Access based on job role and business need.
Secure Communication
Approved methods for exchanging business information.
Workforce Safeguards
Training, confidentiality, and information-handling expectations.
Incident Response
Defined processes to investigate and respond to potential issues.
SECURITY BY DESIGN
Only the right people. The right information. For the right reason.
We limit access to what’s needed, use information only for the work we’re trusted to perform, and manage access throughout our relationship.
OnboardRole-appropriate accessAgreed-upon workSecure communicationReview accessOffboard
People
Security works best when we understand our responsibilities.
- Privacy and security training
- Confidentiality expectations
- Defined responsibilities
- Appropriate access
Processes
Consistent safeguards built into everyday work.
- Policies and procedures
- Information-handling standards
- Access management
- Incident response
Technology
Systems that support responsible information handling.
- Authentication safeguards
- Access controls
- Secure communication
- Device and system protection
IF SOMETHING GOES WRONG
We’re prepared.
Even with strong safeguards, unexpected situations can happen. We have a defined approach to identify, contain, assess, respond, and improve.
Clear Responsibilities
When CJL Medbill performs services that make us a Business Associate under HIPAA, we will enter into an appropriate Business Associate Agreement (BAA).
A Shared Responsibility
What we ask of our clients:
- Protect login credentials
- Notify us of staffing or access changes
- Use approved communication channels
- Do not send patient information through public forms
IMPORTANT
Please don’t send patient information through this website.
Our website forms are for general business inquiries only. Please do not include patient names, dates of birth, medical records, insurance information, Social Security numbers, or other protected health information (PHI).
Trust is earned. You deserve both.
Security isn’t a badge we place on a website. It’s a responsibility behind our work. We’re committed to providing the professional safeguards expected of a healthcare partner, with the personal service you value from a hometown team.