HIPAA & Privacy

Excelas regularly works with medical records and other sensitive information on behalf of legal, claims, and healthcare clients. Protecting that information is an important part of our processes, technology, and client relationships.

The requirements for handling protected health information can vary based on the services being provided, the organizations involved, and the nature of the information being handled. Excelas follows applicable privacy, security, and information-handling requirements based on the scope and needs of each engagement.

Excelas uses safeguards designed to protect protected health information and other sensitive client information throughout our work.

Depending on the engagement, this may include:

• secure methods for receiving and sharing medical records
• access limited to authorized individuals
• secure access to records and work product through approved systems
• requirements governing the use and disclosure of protected health information
• appropriate protections when third parties handle protected health information on our behalf
• processes for addressing privacy or security incidents when required

We work with clients to establish appropriate processes for receiving, accessing, sharing, and retaining records based on the scope of the engagement and applicable requirements.

If your organization has specific privacy, security, or information-handling requirements, we can address those as part of the engagement process.