HIPAA Statement

Our role under HIPAA

Zenith Care Solutions LLC provides Chronic Care Management (“CCM”) and related clinical support services to U.S. healthcare providers under contract. When we handle protected health information (PHI) on behalf of a client practice, we operate as a Business Associate under the Health Insurance Portability and Accountability Act (HIPAA), as amended by the HITECH Act, and the regulations issued thereunder (collectively, “HIPAA”).

This website collects no PHI

This website (https://thezcs.com) is a marketing and informational resource for prospective client practices. It does not collect, store, process, or transmit protected health information. Our contact forms and chatbot are limited to business-contact information from providers and administrators. We ask every visitor not to submit any patient-identifying information through this site or by unencrypted email.

Our Business Associate Agreements

Before Zenith receives or handles any PHI on behalf of a client practice, we sign a Business Associate Agreement (BAA) with that practice. The BAA governs:

• Permitted uses and disclosures of PHI
• Safeguards we must maintain
• Breach notification obligations
• Return or destruction of PHI at the end of the engagement

Our BAA is based on current HHS sample provisions and may be reviewed by prospective clients during the contracting process.

Safeguards we maintain

Administrative: workforce training on HIPAA and the Minimum Necessary rule; written policies and procedures; designated privacy and security contact; sanctions for workforce violations; access reviews.

Physical: locked workspaces for personnel handling PHI; device inventory; secure disposal of hardware.

Technical: encrypted transmission of all PHI; access via client-controlled EHR/CCM platforms rather than exported data; multi-factor authentication; audit logging; secure password management; encrypted email tooling (HIPAA- eligible Google Workspace or Microsoft 365, each with a signed BAA from the respective vendor).

Minimum Necessary

Zenith accesses, uses, and discloses only the Minimum Necessary PHI to perform the services required under each client contract.

Breach notification

In the event of a breach of unsecured PHI, Zenith will notify the affected client practice without unreasonable delay and in no case later than the timeframe required by HIPAA and the governing BAA. The client practice remains responsible for notifying affected individuals and HHS as required by law.

What this statement is not

This statement describes Zenith’s operational posture. It is not a Notice of Privacy Practices (which is a document covered entities provide to their patients), and it is not a substitute for a signed Business Associate Agreement. Prospective clients should request a BAA before any PHI is shared.

Contact

For HIPAA-related inquiries, please contact: contact@thezcs.com.

Zenith Care Solutions LLC · Wyoming, USA
Mailing address: 30 N Gould St, Suite #70349, Sheridan, WY 82801, USA