Data Security: PCI and HIPAA Compliance Explained

“Safe and secure”. That’s a phrase that someone who has your private information stored somewhere in a computer assumes you want to hear. But for millions of people, the words they hear more often on the news are “data breech”, “hacked” and “stolen”. Fear not, there are a few more terms that we know of that can ease your privacy concerns. PCI and HIPAA.  These are basically rules that have been designed to ensure that any organization that collects, stores, or uses private cardholder or patient information handles it properly.

At Centris, we have seen the immediate benefit of compliance with these regulations and are proudly providing PCI and HIPAA compliance. These are real, measurable steps we’ve taken to demonstrate that we value your information and will do what it takes to keep it private. We have earned the trust of our clients and are serious about our expertise in data security.

• PCI –
  Developed by the “Payment Card Industry” (i.e., major credit card companies) to set specific standards for the secure storage of cardholder personal data and when applicable, that the information remains secure during a data transfer. With the 12 required standards in place, the customer or cardholder is less likely to be involved in data breeches or hacks. PCI compliance is an ongoing process which includes firewalls, strong and unique user id’s and passwords, physically locked server and storage data centers, data encryption during transfers, and regular use of anti-virus and anti-malware software. It is also important to control and restrict access to the information, both from employee and cardholder entry. With these systems in place, documenting plans to maintain security and enforcement are the final key steps to achieving compliance.
• HIPAA –
  This healthcare based regulation is the Health Insurance Portability and Accountability Act or HIPAA. It’s a two part system that ensures heath care protection for people who have been laid off or are between jobs. That’s the “Portability” portion of the act. The “Accountability” portion sets the standard for maintaining the security of electronic records, for billing as well as patient information privacy and patient right to access their information. HIPAA compliance applies to companies that directly gather healthcare information and partners that are able to access that information.As with the PCI compliance standards, HIPAA compliance involves similar technical, physical and organizational processes. There are also requirements for assessing risk, breach protocols and ongoing training.

Centris provides end-to-end customer service solutions in English and Spanish. We are PCI and HIPAA compliant and ensure all our programs meet necessary regulations. Whether you are looking for traditional voice services, live chat, emails, social media, or text messaging services, you can rely on Centris to provide a high-quality, data-secure experience for your customers. Contact us today for more information.