Legal
HIPAA Notice
Last updated:
Guardian Medical Solutions LLC acts as a Business Associate to the healthcare providers we serve. We handle protected health information (PHI) only as permitted by our Business Associate Agreements and the HIPAA Privacy, Security and Breach Notification Rules.
How we protect PHI
- Encrypted data transfer and secure, access-controlled systems for all client work.
- Role-based, least-privilege access with activity logging.
- Secure workstations and device policies for every team member.
- HIPAA and confidentiality training before anyone accesses client systems, with annual refreshers.
- Periodic risk assessments and policy reviews.
Use and disclosure
PHI is used solely to perform billing, coding, administrative and virtual assistant services on behalf of our clients, as described in each client's Business Associate Agreement. We never sell PHI or use it for marketing.
Subcontractors
Where a subcontractor supports a client engagement, we require written agreements that impose the same HIPAA obligations we accept ourselves.
Breach notification
In the unlikely event of a breach of unsecured PHI, we notify affected clients without unreasonable delay and in accordance with our BAA and federal requirements, and we support the client's own notification obligations.
Patients
If you are a patient with questions about how your information is used, please contact your healthcare provider directly. Their Notice of Privacy Practices governs your rights, and we assist them on request.
Questions
Contact our Privacy Officer at info@getguardianmedicalsolutions.com or by mail at 2714 Hanover Cir NW, Canton, Ohio 44708.