Legal
HIPAA Notice of Privacy Practices
HIPAA Business Associate Compliant
This Notice of Privacy Practices describes how EG Medlink Courier Services may use and disclose protected health information (PHI) in the course of providing medical courier services, and outlines our obligations under the Health Insurance Portability and Accountability Act (HIPAA).
1. Our Commitment to Your Privacy
EG Medlink Courier Services understands that health information about you and your health is personal. We are committed to protecting health information that we may encounter in the course of providing medical courier services.
This Notice describes how we may use and disclose protected health information (PHI) and how you can get access to this information. Please review it carefully.
2. What Is Protected Health Information (PHI)?
Protected Health Information (PHI) is any information that relates to a person’s health condition, the provision of healthcare, or payment for healthcare that can be used to identify an individual. As a medical courier, we may come into incidental contact with PHI on package labels, manifests, or documentation associated with deliveries.
3. How We Handle PHI
EG Medlink Courier Services acts as a Business Associate to healthcare providers, pharmacies, and laboratories. In this role, we:
- Do not open sealed packages or containers.
- Do not record, copy, or retain PHI beyond what is necessary to complete a delivery.
- Use PHI only to fulfill the specific courier service requested.
- Do not disclose PHI to any unauthorized third parties.
- Maintain physical security of packages in our possession at all times.
4. Business Associate Agreements
When required by HIPAA, EG Medlink Courier Services will enter into a Business Associate Agreement (BAA) with covered entities (pharmacies, laboratories, hospitals, and healthcare providers) prior to handling PHI on their behalf.
If your organization requires a BAA, please contact us before initiating service.
5. Safeguards We Maintain
We maintain the following safeguards to protect PHI:
- Physical Safeguards: Secure handling of packages, locked vehicle storage when applicable, and direct chain-of-custody delivery.
- Administrative Safeguards: Confidentiality training, limited access to delivery information, and secure disposal of any incidental PHI documentation.
- Technical Safeguards: Secure communication channels for any electronic transmission of delivery information.
6. Permitted Uses & Disclosures
We may use or disclose PHI only as permitted or required by law, including:
- To complete the delivery service as directed by the covered entity.
- As required by law, such as in response to a court order or law enforcement request.
- To report a serious threat to health or safety.
We will not use or disclose PHI for any other purpose without written authorization from the covered entity.
7. Breach Notification
In the event of a breach of unsecured PHI, EG Medlink Courier Services will notify the affected covered entity promptly and in accordance with HIPAA Breach Notification Rule requirements (45 CFR §§ 164.400-414).
Notification will include: a description of the breach, the types of PHI involved, steps individuals should take to protect themselves, and steps we are taking to investigate and mitigate the breach.
8. Your Rights
If you are a patient whose PHI was handled by EG Medlink Courier Services, your rights regarding that PHI are governed by the covered entity (pharmacy, lab, or healthcare provider) that engaged our services. Please contact them directly to exercise your HIPAA rights.
9. Changes to This Notice
We reserve the right to change this Notice at any time. Changes will be effective for all PHI we maintain. The updated Notice will be posted on our website with a revised effective date.
10. Contact Us
For questions about this HIPAA Notice, to request a Business Associate Agreement, or to report a privacy concern, please contact us:
Disclaimer: This HIPAA Notice is provided for informational purposes. EG Medlink Courier Services recommends consulting with a qualified healthcare attorney to ensure full HIPAA compliance for your specific situation. This notice does not constitute legal advice.