HIPAA Compliance
Your Protected Health Information is secure with us. We maintain the highest standards of HIPAA compliance.
Full HIPAA Compliance
Mediclaero is fully compliant with the Health Insurance Portability and Accountability Act (HIPAA) and maintains strict safeguards to protect Protected Health Information (PHI).
Our Commitment to HIPAA
As a Business Associate, we understand the critical importance of protecting patient health information. We have implemented comprehensive policies, procedures, and technical safeguards to ensure full HIPAA compliance.
Administrative Safeguards
- Designated HIPAA Privacy and Security Officers
- Comprehensive workforce training on HIPAA requirements
- Regular security awareness training and updates
- Strict access controls and authorization procedures
- Business Associate Agreements (BAAs) with all partners
- Incident response and breach notification procedures
Physical Safeguards
- Secure facility access controls
- Workstation security measures
- Media controls and disposal procedures
- Restricted access to PHI storage areas
Technical Safeguards
- Encryption of PHI in transit (TLS/SSL)
- Encryption of PHI at rest
- Unique user identification and authentication
- Audit logs and access tracking
- Automatic logoff and session management
- Regular security assessments and penetration testing
Business Associate Agreements
We execute Business Associate Agreements (BAAs) with all Covered Entities and other Business Associates as required by HIPAA. These agreements ensure that all parties understand their responsibilities for protecting PHI.
Breach Notification
In the unlikely event of a breach of unsecured PHI, we have procedures in place to:
- Immediately investigate and contain the breach
- Notify affected Covered Entities within required timeframes
- Notify individuals if required by law
- Report to HHS as necessary
- Document all breach incidents and responses
Regular Audits and Assessments
We conduct regular internal audits and risk assessments to identify and address potential vulnerabilities. We also engage third-party security experts to perform independent assessments of our security posture.
Employee Training
All employees receive comprehensive HIPAA training upon hire and participate in ongoing training programs. We ensure that every team member understands their role in protecting PHI and maintaining compliance.
Contact Our Compliance Team
For questions about our HIPAA compliance or to request a Business Associate Agreement, please contact:
HIPAA Privacy Officer: privacy@mediclaero.com
HIPAA Security Officer: security@mediclaero.com
Phone: +1 (505) 359-4800
Address: 1209 Mountain Road PL NE STE N, Albuquerque, NM 87110