HIPAA Compliance Statement

1. Our Commitment

Nexlian ("we," "our," or "us") is fully committed to compliance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and all related regulations. We maintain strict policies and procedures to protect Protected Health Information (PHI) in accordance with federal standards.

2. HIPAA Safeguards

We implement comprehensive safeguards as required by HIPAA:

• Administrative Safeguards: Policies, procedures, staff training, and risk assessments
• Physical Safeguards: Facility access controls, workstation security, and device/media controls
• Technical Safeguards: Access controls, encryption, audit controls, and transmission security

3. Protected Health Information (PHI)

We handle the following types of PHI with utmost care:

• Medical Records: Patient health information and treatment records
• Personal Identifiers: Names, addresses, dates, contact information
• Healthcare Data: Claims, test results, and billing information
• Digital Records: Electronic health records and related data

4. Business Associate Agreements

We maintain Business Associate Agreements (BAAs) with all partners and vendors who may access PHI, ensuring:

• Appropriate use and disclosure of PHI
• Implementation of required security measures
• Breach notification procedures
• Return or destruction of PHI when required

5. Security Measures

Our security infrastructure includes:

• Enterprise-grade encryption at rest and in transit
• Multi-factor authentication
• Regular security assessments and audits
• Incident response procedures
• Disaster recovery and business continuity plans

6. Patient Rights

We support and facilitate HIPAA-guaranteed patient rights:

• Right to access health information
• Right to request corrections
• Right to receive disclosure accounting
• Right to request restrictions
• Right to confidential communications

7. Breach Notification

In the event of a breach, we follow HIPAA requirements for:

• Prompt investigation and risk assessment
• Timely notification to affected individuals
• Reporting to HHS when required
• Implementation of corrective measures

8. Contact Information

For HIPAA-related inquiries or concerns, please contact our Privacy Officer at:

Email: hipaa@nexlian.com