HIPAA Applies to Your Outsourcing Call Center, Too
January 13, 2017
As I mentioned in “Five Things to Check Before Outsourcing Your Healthcare Calls,” it is critical to hire a call center that complies with HIPAA, the Health Insurance Portability and Accountability Act. Don’t assume every outsource healthcare call center is HIPAA compliant. Though they should be, not all are.
You know that HIPAA compliance is essential, and they should, too. But some call centers don’t care, while others don’t treat compliance seriously enough.
You are the covered entity (CE) and they are your business associate (BA), which means you are both responsible for keeping protected health information (PHI) secure. Therefore you must both fully comply with all relevant HIPAA regulations.
Some healthcare organizations (as the covered entity) may assume that as long as they are compliant in their practices, that’s all that matters. But as the CE, you are ultimately responsible for what your outsourced call center (your business associate) does. If they expose PHI, both you and they are subject to civil and criminal penalties, not to mention the hit to your reputation – even if it’s your call center’s fault.
Conversely some outsource call centers wrongly assume that they fall under the umbrella of their clients’ HIPAA compliance efforts. Again, this is just plain faulty reasoning. They may presume that if you are compliant and they work for you, that somehow they are magically covered. This is simply not true. If they mishandle PHI, they are at risk of civil and criminal penalties and so are you.
Part of your due-diligence in contracting with an outsource call center is to confirm their practices are in fact HIPAA compliant. Go onsite to verify this or hire a knowledgeable professional to do this for you. Then get it in writing. Next include a relevant clause confirming this in your contract with them. Though they can’t indemnify you if they mess up, having contractual language affirming their compliance should help you in recouping monetary damages should they falter.
However, the real advantage of including a HIPAA compliant statement in your agreement with them is that it reminds them in a tangible sense of their legal obligation to keep PHI secure at all times: in transmission, in storage, and in disposing of it.
This will not be a problem for any viable healthcare call center. And if HIPAA compliance catches them off guard, then they have just confirmed they aren’t fully prepared to handle your calls and caller data as required by law and as expected by best practices.
Ensure HIPAA compliance in your outsourcing call center before they take your first call, and you will avoid unpleasant and costly surprises later on.
Janet Livingston is the president of Call Center Sales Pro, a premier sales and marketing service provider for the call center and telephone answering service industry – and who provides a healthcare call center matchmaking service. Contact Janet at email@example.com or call 800-901-7706.
Peter DeHaan is a freelance writer from Southwest Michigan.
8 Tips to Make Your Call Center Agents Happier
Happy agents will work harder to produce happy callers and customers Call center work is hard. Not every person who accepts a position as a call cente...
Should You Outsource Some of Your Healthcare Calls?
In a prior post, we discussed the importance of not having triage nurses handle basic phone calls. Doing so would be a misapplication of their skills ...
Call Center Sales Pro Expands; Taps Chris Calhoun as VP of Operations
Veteran business leader to take growing call center consultancy to the next level FOR IMMEDIATE RELEASE: October 9, 2017 Minneapolis, MN: Call Center ...
Are You a Responsive Answering Service?
People who use answering services want them to be responsive. It’s easy to understand why. In today’s modern culture, people don’t want to wait....
Brad Swift Joins Call Center Sales Pro as National Sales Manager
Contact center veteran joins leading industry consultancy to help serve more clients, better FOR IMMEDIATE RELEASE: October 4, 2017 Minneapolis...
Weathering the Storm: Lessons Learned From Hurricane Harvey
Providing Answering Service Backup Support From a Thousand Miles Away When hurricane Harvey reached landfall in the United States this August, it beca...
What Are the Risks of Hiring Home-Based Agents for Your Corporate Call Center?
In a prior post we looked at using a work-at-home model for your corporate call center. The benefits are many. These include being able to tap a new l...
Communication Essentials with Acquired Answering Service Clients
In the post what should you do after the acquisition? we looked at seven essential steps to take once your answering service purchase is complete. The...