HIPAA Privacy Policy & Notice of Privacy Practices

1. Our Commitment to Healthcare Privacy

Emrys Behavioral Health (a specialized division of Emrys Billing Solutions) operates as a Business Associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH). We are committed to maintaining the absolute confidentiality, integrity, and availability of Protected Health Information (PHI).

2. Business Associate Agreements (BAA)

Prior to accessing, receiving, or managing any medical records, patient encounters, remittance advices (ERAs), or billing files from our covered entity clients, Emrys Behavioral Health executes a formal, legally binding Business Associate Agreement (BAA). This agreement strictly governs how PHI is collected, processed, retained, and safeguarded.

3. Technical and Administrative Safeguards

• 256-Bit TLS/SSL Encryption: All data in transit across our networks, websites, and portal integrations is encrypted using military-grade cryptographic protocols.
• Restricted Access Controls: Role-based access limitations ensure that billing staff only access patient records strictly necessary to perform claim creation, clearinghouse submission, and denial appeals.
• Mandatory Multi-Factor Authentication (2FA): All clearinghouses, EHR connections, and email systems enforce biometric or token-based 2FA.
• Annual Workforce Training: Every billing specialist and certified coder undergoes annual HIPAA, cybersecurity, and fraud/waste/abuse (FWA) certification.

4. Website Inquiries & Non-PHI Data

Information submitted through our website contact and audit intake forms (including provider names, practice emails, phone numbers, and operational notes) is utilized strictly to communicate with you regarding prospective billing partnerships. We will never sell, rent, or lease your contact information to any third parties.

5. Contacting Our Privacy Officer

If you have any questions regarding our security protocols, BAA execution, or privacy practices, please contact our Compliance Officer at: