Triumph Non-Emergency Medical Transportation logo

Compliance

Compliance & HIPAA

Triumph is committed to protecting patient privacy and maintaining the highest standards of HIPAA compliance and data security. Our protocols are designed to safeguard protected health information (PHI) at every step of the transportation process.

HIPAA Compliance

Full compliance with the Health Insurance Portability and Accountability Act (HIPAA) across all operations, training, and data handling.

Data Security

Encrypted data storage, secure communication channels, and access controls designed to protect sensitive patient information.

Patient Privacy

Strict privacy protocols ensure patient information is shared only with authorized personnel on a need-to-know basis.

HIPAA Protocols

All staff complete HIPAA training upon hire and annually thereafter
Business Associate Agreements (BAAs) available for facility partners as part of onboarding
Minimum necessary standard applied to all PHI access and sharing
Designated HIPAA Privacy Officer responsible for compliance oversight
Documented policies for PHI use, disclosure, and retention
Annual HIPAA compliance audits and risk assessments
Breach notification procedures in compliance with the HITECH Act
Sanction policies for workforce members who violate HIPAA standards

Data Security Measures

Encryption for data at rest and in transit
Role-based access control (RBAC) limiting data to authorized users
Multi-factor authentication for administrative system access
Secure, HIPAA-compliant booking and dispatch platforms
Automated audit logs tracking all data access and modifications
Regular security reviews and vulnerability assessments
Data backup and disaster recovery protocols
Secure deletion of PHI when no longer needed

Patient Privacy Practices

Patient information shared only with authorized care team members
Drivers receive only the information needed to safely transport the passenger
No PHI discussed in public areas or with unauthorized parties
Secure document handling and disposal procedures
Patient right to request access to their transportation records
Patient right to request corrections to their information
Confidentiality agreements signed by all employees and contractors
Regular privacy training and compliance reminders

Staff Training & Certification

HIPAA Privacy and Security Rule training
Patient confidentiality and dignity training
Data handling and secure communication practices
Breach recognition and reporting procedures
Social engineering and phishing awareness
Annual compliance recertification for all staff

Our Commitment

Triumph maintains comprehensive insurance coverage, including general liability, professional liability, and commercial auto insurance. We carry workers' compensation and are fully licensed and insured in the state of Indiana. We welcome compliance audits and are happy to provide Business Associate Agreements, insurance certificates, and detailed compliance documentation to facilities upon request.

Need our compliance documentation?

We provide BAAs, insurance certificates, and full compliance records to facilities.

Request a ContractCall Our Team