Purpose-limited access
Access is aligned to the role and task required to deliver the authorized service.
HIPAA notice & privacy
Privacy built into every RCM workflow.
RIZEN RCM supports healthcare organizations with privacy-aware revenue cycle operations. This page explains our role, the safeguards that shape our work, and the safe ways to communicate with our team.
Important context
RIZEN RCM may support healthcare organizations as a business associate. A patient's formal Notice of Privacy Practices is provided by their healthcare provider or health plan; that organization's notice controls how it uses and discloses patient information.
Supporting care organizations with respect for protected health information.
When authorized by a healthcare organization, RIZEN RCM may receive, create, maintain, or transmit protected health information (PHI) to perform revenue cycle services. Our work is shaped by the applicable agreement with that organization and by the privacy and security requirements that apply to the engagement.
We treat access to PHI as a responsibility, not a convenience. Information is handled only in connection with the operational work it is needed to support.
Information is used for the work it is meant to support.
Depending on the scope of an engagement and the instructions of the healthcare organization, information may be used to support billing and revenue cycle activities such as:
- Claim preparation, submission, correction, and status follow-up
- Eligibility, benefits, authorization, and payer communication workflows
- Payment posting, accounts receivable follow-up, and denial management
- Operational reporting and quality review tied to contracted services
We do not use PHI for unrelated marketing purposes. The healthcare organization remains responsible for its patient-facing privacy notice and for directing any use or disclosure of information outside the scope of our services.
Privacy should be present in the process, not added at the end.
Our operational approach is designed to minimize unnecessary exposure to sensitive information and to keep accountability visible throughout the workflow.
Operational controls
Workflow expectations help keep sensitive details within the right channel and context.
Team accountability
Privacy-aware practices are reinforced as part of the way revenue cycle work is performed.
Secure escalation
When sensitive records are needed, teams can move the conversation to an appropriate approved process.
Please keep patient information out of public channels.
Do not include patient names, dates of birth, account numbers, clinical details, insurance IDs, or other PHI in website forms, general email, or unapproved messaging channels. We can help identify an appropriate next step when a secure exchange is needed.
Non-sensitive inquiry
Start a safe inquiry
For service questions, share only your organization name, business contact details, and a high-level description of your operational need.
Patient privacy requests begin with the healthcare provider.
If you are a patient seeking access to records, an amendment, an accounting, a copy of a Notice of Privacy Practices, or another privacy right, please contact the healthcare provider or health plan that delivered or arranged your care. That organization is best placed to verify the request and respond under its own policies.
RIZEN RCM will support the healthcare organization as appropriate within the scope of the applicable service agreement.
Questions about privacy or secure communication?
For a non-sensitive business or privacy inquiry, contact the RIZEN RCM team. Please do not send PHI in a standard email message.
RIZEN RCM
Email our team
We will help route the conversation to the right next step.
For a patient-record request, contact the provider or health plan directly.
This page is an informational overview of RIZEN RCM's privacy-aware operating approach. Review any patient-facing HIPAA notice, business associate agreement, and privacy policy with your qualified privacy or legal professional before publication.