The HIPAA

The Health Insurance Portability and Accountability Act, or HIPAA, is a set of comprehensive regulations and guidelines enacted by the Clinton administration in 1996. The HIPAA aims to protect patients’ privacy and rights and improve the efficiency and effectiveness of the healthcare system by establishing standards and requirements for the transmission and storage of electronic health information.

MedexCel’s operations and IT infrastructure are calibrated to meet all the HIPAA requirements. 

Administrative

• All our employees who have access to clients’ sensitive information sign a strict computer and internet usage policy and confidentiality and non-disclosure agreements.
• All our transcriptions are performed with a central location.
• Unauthorized printing of documents is prohibited. Print outs are immediately shredded after official use.
• All emails and online communications are restricted to authorized personnel only.

Physical

• Our work area facility is kept physically safe and secure 24/7.
• A door access control system bars unauthorized entry.
• CCTV cameras consistently monitor our work premises.
• A 24-hour security personnel patrols our facility.
• Our servers are centrally located in a secure area.
• Access to our physical server is limited to authorized personnel only.

Technical

• Our network and internet system are configured to prevent any unauthorized access to electronically protected health information (ePHI).
• Our network employs a proxy server to filter internet and network access.
• Our server systems are configured with firewall, anti-virus and anti-spyware protection software.
• Removable media (like CD drive, floppy drive and USB ports) are disabled in our workstations.
• Our file transfer process by email or FTP uses SSL 128 to 256-bit encryption.
• Employees are not allowed to send and receive personal emails through our network.
• Internet chat rooms and forum are disabled/restricted in our network.