Compliance
HIPAA Notice
Our commitments as a business associate handling protected health information.
Business associate status
Lumiere Billing operates as a business associate to the covered entities we serve. Every engagement begins with a signed Business Associate Agreement before any protected health information is accessed.
Administrative safeguards
Role-based access, documented policies and procedures, annual workforce HIPAA training, sanction policies, and periodic risk assessments.
Technical safeguards
Encryption in transit and at rest, multi-factor authentication, unique user identification, automatic session termination, and audit logging of PHI access.
Physical and operational safeguards
Secured workstations, device controls, and a minimum-necessary standard applied to every request for information.
Breach notification
In the unlikely event of a breach of unsecured PHI, we notify the affected covered entity without unreasonable delay and in accordance with the HIPAA Breach Notification Rule.
Questions
Compliance questions may be directed to hello@lumierebilling.com or (833) 586-4874.