Business Associate Agreement
Before any protected health information is exchanged, we execute a BAA defining permitted uses, safeguards, breach notification duties and the return or destruction of PHI at the end of the engagement.
Technical safeguards
PHI is encrypted in transit and at rest. Access is role-based and least-privilege, multi-factor authentication is required, and all access is logged and reviewed.
Workforce training
Every team member completes HIPAA and security awareness training at hire and annually thereafter, with role-specific training for coders and billers.
Breach notification
In the unlikely event of a breach affecting your data, we notify your designated privacy contact without unreasonable delay and support your notification obligations.
Reporting a concern
Privacy concerns can be reported to hello@californiabilling.com or by phone at (631) 652-3106.
Last updated: September 2026