Skip to content

Privacy & Security

Privacy, confidentiality, and information security.

We treat the protection of public-health information as a core operational responsibility — supported by written procedures, trained personnel, and the security requirements of each client.

HIPAA

When HIPAA applies.

HIPAA applies when TraceCare acts as a covered entity or business associate under the relevant circumstances. Where applicable, TraceCare will implement safeguards consistent with the HIPAA Privacy, Security, and Breach Notification Rules, and will execute business associate agreements when required.

TraceCare Health is not "HIPAA-certified" — there is no official government HIPAA certification for organizations. Compliance depends on ongoing practices, not solely on the existence of policies or security software.

Administrative safeguards

  • Security risk analysis and risk management
  • Workforce confidentiality agreements
  • Workforce privacy and security training
  • Incident response procedures
  • Business associate agreements when required
  • Procedures for handling privacy complaints

Technical safeguards

  • Role-based access controls
  • Multifactor authentication
  • Encryption in transit and at rest where appropriate
  • Secure data transmission
  • Access logging and monitoring

Physical & operational safeguards

  • Secured, managed workforce devices
  • Client-specific security requirements
  • Records retention and secure disposal
  • Timely access removal at offboarding

Website data practices

  • Public forms collect only business or recruitment information — never patient names, diagnoses, dates of birth, or contact-tracing records.
  • No protected health information is placed in website analytics, advertising pixels, or email notifications.
  • Staff notification emails contain only minimal business metadata.

Privacy notice: Please do not submit protected health information or confidential patient information through this website. For authorized case information, use the secure system designated by your organization.

Read our Privacy Policy and SOP library. Privacy concerns may be submitted through the Contact page (without any confidential details).

Content on this page is provided for professional privacy/legal review before launch.