HIPAA compliance statement

ImmediCare Solutions LLC operates as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, including the HIPAA Privacy Rule (45 CFR Part 164) and the HIPAA Security Rule (45 CFR Part 164).

Business Associate Agreement (BAA)

We execute a signed Business Associate Agreement with every client practice before accessing any protected health information (PHI). This agreement defines the permitted uses and disclosures of PHI, establishes security obligations, and governs breach notification procedures as required by HIPAA.

How we protect PHI

• All PHI is handled exclusively by our US-based team — no offshore processing.
• Data at rest and in transit is encrypted using industry-standard protocols.
• Access to PHI is role-based and limited to staff with a legitimate need.
• All access to PHI is audit-logged with timestamps and user identification.
• PHI is never stored in publicly accessible systems or transmitted via unsecured email.
• Staff complete HIPAA Privacy and Security training upon hire and annually thereafter.
• We maintain procedures for identifying, containing, and reporting security incidents.

Breach notification

In the event of a breach of unsecured PHI, ImmediCare Solutions will notify affected covered entities without unreasonable delay and no later than 60 calendar days following discovery of the breach, in accordance with 45 CFR § 164.410.

Contact

For compliance enquiries or to request a copy of our Business Associate Agreement, contact us at:

ImmediCare Solutions, LLC
1050 Wagner Ave, Philadelphia, PA 19141
Email: [email protected]
Phone: (610) 609-7321