Security & privacy
HIPAA Compliance
Every resident’s protected health information (PHI) is handled under the administrative, physical, and technical safeguards required by federal law — built into how RD Health Services operates, not bolted on afterward.
At a glance
On this page
What HIPAA requires
HIPAA — the Health Insurance Portability and Accountability Act — sets the federal standard for protecting sensitive patient data. Any company that handles protected health information (PHI) must have the required physical, technical, and administrative safeguards in place.
The HIPAA Privacy Rule governs how medical and personal information is saved, accessed, and shared. The HIPAA Security Rule sets national standards specifically for protecting electronic protected health information (ePHI) — data that is created, received, maintained, or transmitted electronically.
Physical safeguards
RD Health Services LLC is hosted with LiquidWeb, a HIPAA-compliant hosting provider. Physical safeguards include limited facility access and control, with authorization required for entry.
Our hosting provider maintains policies governing the use and access of workstations and electronic media — including how electronic media and ePHI are transferred, removed, disposed of, and reused.
Technical safeguards
Access to electronic protected health information is limited to authorized individuals through unique user IDs, an emergency access procedure, automatic log-off, and encryption and decryption controls.
Audit controls & data integrity
Audit reports and tracking logs record activity across our hardware and software, helping pinpoint the source of any security concern quickly.
Integrity controls confirm that ePHI has not been altered or destroyed. IT disaster recovery and offsite backups ensure that in the event of a system error or failure, resident health information can be recovered accurately and intact.
Business Associate Agreement
We sign a BAA with every facility we work with
A Business Associate Agreement (BAA) formalizes our shared responsibility, alongside yours, to protect resident health information — required under HIPAA whenever a business associate like RDHS handles PHI on a covered entity’s behalf.
Questions about how we protect resident data?
Our team is happy to walk through our safeguards or provide a copy of our standard BAA.