HIPAA Notice

1. Our Role Under HIPAA

As a credentialing and payer enrollment firm, Precision Credentialing Solutions LLC may access, use, or disclose certain information related to healthcare providers in the course of providing our services. We act as a Business Associate to our clients (Covered Entities) and are bound by applicable HIPAA regulations.

We do not collect or process patient health information (PHI). The information we handle relates exclusively to provider credentials, professional licenses, and enrollment applications.

2. Information We Handle

In the course of providing credentialing services, we may handle the following provider information:

• National Provider Identifier (NPI)
• State medical license numbers and credentials
• DEA registration information
• Board certifications and education history
• Malpractice insurance information
• Employment and practice history
• CAQH ProView login credentials and profile data
• Tax identification numbers (EIN/SSN) for enrollment purposes

3. How We Protect Your Information

We implement the following safeguards to protect provider information:

• Administrative safeguards: Staff training on confidentiality, access controls, and data handling procedures
• Technical safeguards: Encrypted storage, secure communications, and access-controlled systems
• Physical safeguards: Secure workstations and restricted access to physical records
• Business Associate Agreements: We execute BAAs with clients where required by HIPAA

4. Permitted Uses and Disclosures

We use and disclose provider information only as necessary to:

• Complete credentialing applications and submissions to insurance payers
• Maintain and update CAQH ProView profiles
• Communicate with payers, networks, and government agencies on behalf of the provider
• Comply with applicable federal and state laws and regulations

We do not sell, rent, or share provider information for marketing purposes.

5. Business Associate Agreements

Where required by law, we will execute a Business Associate Agreement (BAA) with our clients prior to the commencement of services. If you require a BAA, please notify us at the time of engagement.

6. Data Breach Notification

In the event of a breach of unsecured information that may affect our clients, we will notify affected parties in accordance with applicable HIPAA Breach Notification Rules, within the timeframes required by law.

7. Your Rights

As a healthcare provider working with us, you have the right to:

• Request access to the information we hold on your behalf
• Request corrections to inaccurate information
• Request an accounting of disclosures we have made
• Request restrictions on how your information is used or disclosed
• File a complaint if you believe your rights have been violated

8. Filing a Complaint

If you believe your privacy rights have been violated, you may file a complaint with us directly or with the U.S. Department of Health and Human Services Office for Civil Rights:

You will not be retaliated against for filing a complaint.

9. Contact Us

For questions regarding this HIPAA Notice or to request a Business Associate Agreement: