HIPAA Compliance
Our Commitment to Data Security
NexusMedRev maintains strict HIPAA compliance to protect your patients' protected health information (PHI) and ensure the highest standards of data security.
HIPAA Compliance Overview
The Health Insurance Portability and Accountability Act (HIPAA) establishes national standards for protecting sensitive patient health information. As a business associate providing medical billing services, NexusMedRev is fully committed to maintaining HIPAA compliance in all aspects of our operations.
We understand that protecting patient privacy is not just a legal requirement—it's a fundamental responsibility we take seriously.
HIPAA's Three Main Rules
Privacy Rule
Establishes national standards to protect individuals' medical records and other personal health information
Security Rule
Requires appropriate safeguards to ensure the confidentiality, integrity, and security of electronic PHI
Breach Notification
Requires notification of breaches of unsecured PHI to affected individuals, HHS, and in some cases, the media
Our HIPAA Compliance Measures
Administrative Safeguards
- Designated Privacy and Security Officers
- Comprehensive staff training programs
- Regular risk assessments and audits
- Incident response and contingency plans
- Business Associate Agreements with all vendors
Physical Safeguards
- Secure, access-controlled facilities with 24/7 monitoring
- Workstation security and device encryption
- Secure disposal of physical records and electronic media
- Limited access to areas containing PHI
Technical Safeguards
- End-to-end encryption for data in transit and at rest
- Multi-factor authentication and unique user IDs
- Automatic logoff and session timeout controls
- Comprehensive audit logs and access tracking
- Regular security updates and vulnerability patching
- Firewall protection and intrusion detection systems
Ongoing Staff Training & Awareness
All NexusMedRev employees receive comprehensive HIPAA training:
Breach Response Protocol
In the unlikely event of a security incident or breach, we have established procedures to:
Business Associate Agreement (BAA)
As part of our HIPAA compliance commitment, NexusMedRev enters into a Business Associate Agreement with all healthcare provider clients. Our BAA includes:
- Clear definition of permitted uses and disclosures of PHI
- Safeguard requirements to protect PHI
- Prohibition on unauthorized use or disclosure
- Requirements for subcontractor agreements
- Procedures for breach notification
- Terms for PHI return or destruction upon termination
- Audit and compliance verification rights
Certifications & Audits
Regular Audits
- • Annual HIPAA compliance audits
- • Quarterly security assessments
- • Penetration testing
- • Third-party security reviews
Industry Standards
- • SOC 2 Type II compliance
- • HITRUST certification
- • ISO 27001 aligned practices
- • NIST cybersecurity framework
HIPAA Compliance Questions?
Our Privacy and Security Officers are available to address your HIPAA compliance concerns.
Email: info@nexusmedrev.com
Phone: +1 (737) 316-2200
Address: 5900 Balcones Drive Suite 100 Austin , TX 78731