Privacy, Security & Compliance
SearchAmerica is highly sensitive to the many privacy issues surrounding consumer information. To ensure an appropriate level of security, all data is transmitted via encrypted web servers. All SearchAmerica users are required to have a business need (permissible purpose) to access the searches and are provided unique logins and passwords to access the web site. Further, SearchAmerica carefully screens all customers, including on-site interviews, to ensure appropriate use practices and grants access to the appropriate level of information based on each client’s business model.
SearchAmerica and our data sources proactively comply with all provisions of the Gramm-Leach-Bliley (GLB) and the Fair Credit Reporting Acts (FCRA). SearchAmerica also adheres to all Health Insurance Portability and Accountability Act (HIPAA) guidelines regarding the privacy and security of patient information, and requires that its customers comply with all provisions of these acts as well.
SearchAmerica is also committed to ensuring customer privacy by protecting the information that clients provide. Identifiable information is securely maintained solely for contact purposes within SearchAmerica and is not sold or transferred to other entities. Customer information is used to communicate product announcements or service-related issues.
The Fair Credit Reporting Act (FCRA), enacted in October 1970 and most recently amended in November 1999, was established to restrict the disclosure of nonpublic personal information (including consumer credit rating and other sensitive information). The FCRA restricts the distribution of data from consumer credit files to companies who have a permissible purpose to access the data. Permissible purpose includes a legitimate business need for the information in connection with a business transaction that is initiated by the consumer.
In governing the distribution of data from credit reports prior to the Gramm-Leach-Bliley Act (GLB), the Federal Trade Commission (FTC) did not place permissible purpose restrictions on those who accessed the credit file for only the basic identity data and not financial information. With GLB, the FTC expanded the restrictions of data from credit files to include the basic demographic data as well (which is now also governed by the FCRA) and its distribution is limited to those with a "permissible purpose" for accessing the information.
Please contact privacy@searchamerica.com for compliance issues/questions.
Permissible Purpose Enrollment
Customers who wish to use permissible purpose searches are asked to participate in an enrollment process that requires the submission of various documents for review and verification. These documents provide information as to what the company does, where it is located, and its purpose for accessing consumer credit information. This process, facilitated by SearchAmerica, is in compliance with GLB and FCRA requirements. Upon verification of a permissible purpose, customers receive quick and easy access to highly accurate, permissible purpose searches through SearchAmerica.
HIPAA Statement
SearchAmerica, Inc. is well aware of the HIPAA regulations and the challenges and opportunities they present to the health care industry. SearchAmerica plans to be in full compliance with all applicable HIPAA regulations on or before the deadlines. To meet this objective, SearchAmerica began internal HIPAA education and awareness in 1999. Since that time designated employees attended numerous HIPAA conferences, seminars, national committee, and subcommittee meetings. A HIPAA task force was established. Internal HIPAA awareness training for management occurred. Specific staff members were assigned responsibility for HIPAA compliance including appointment of Security, Privacy, and Compliance Officers. Privacy and Security Policies are currently being implemented internally. Although formal work implementing HIPAA policies and procedures continues, the sections below address progress to date.
Privacy
The Standards for Privacy of Individually Identifiable Health Information were finalized on April 14, 2001. The compliance deadline was April 15, 2003. SearchAmerica demonstrates a firm commitment to privacy and confidentiality by protecting confidential information from inappropriate access and disclosure. Each person working in the SearchAmerica environment is responsible for protecting confidential information and preserving the privacy of subscribers, clients, and employees by signing a confidentiality and non-disclosure document stating that they will preserve confidentiality in conversations and in handling, copying, faxing and disposing of protected health information. Only persons with an officially granted account may access SearchAmerica computer systems and network requiring passwords. Each person is liable for all activity occurring under his or her account. SearchAmerica meets the required Privacy policies and procedures as established in the regulations. The SearchAmerica workforce received Privacy training and will continue to receive on-going training as needed.
Security
The Standards for Security and Electronic Signatures were finalized on February 20, 2003. The compliance deadline was April 21, 2005. The general intent of the Security regulations is closely aligned with the existing design of SearchAmerica's services, and with existing security measures and processes. The SearchAmerica security model currently meets the Health Care Financing Administration (formerly HCFA but now the Centers for Medicaid and Medicare Services) policy governing communications of Privacy Act and other sensitive information over the Internet as defined in "HCFA INTERNET SECURITY POLICY" dated November 24, 1998. Specific documents addressing SearchAmerica's current security processes and procedures are available through SearchAmerica Sales or Customer Support. SearchAmerica has finalized the required Security policies and procedures to meet the Security guidelines established in the regulations. The SearchAmerica workforce received Security training and will continue to receive on-going training as needed.
Legislation Guidelines
Further Information
For questions on Security and Compliance, please contact privacy@searchamerica.com
LATEST NEWS
IRS 990 - Schedule HImprove compliance with automated, objective charity care program screening and reporting
[12-7-2007]
IT Support For Charity Programs
[8-15-2007]
County Cracks Down on Health-Care Scammers
[8-1-2007]
IRS Section
H 990 Form Requires New Reporting on Charity and Bad Debt
UPCOMING EVENTS
North Carolina AAHAM
April 30 - May 1, 2008
Greensboro, North Carolina
NAHAM
May 3 - 6, 2008
Exhibit - Booth #114
Dallas, Texas
eSummit
Webinar
May 20 & 22, 2008
HFMA ANI
June 24 - 26, 2008
Exhibit - Booth #1144
Las Vegas, Nevada
HFMA Leadership Summit
July 24, 2008
San Diego, California
HDX Innovations
July 28 - 31, 2008
Exhibit
Las Vegas, Nevada
©2007 SearchAmerica |
