Privacy and Security

Privacy and Security

Privacy & Security:  This program accredits organizations against our core criteria. These criteria address not only privacy and security, but customer service, business practices, personnel requirements, third-party cloud service providers, and more. This program is applicable for organizations with stakeholder-specific services that are not addressed by any of our other programs.

To begin the application process for accreditation, please complete the application form through our website. Program criteria are located on the criteria page.

Also, are you looking for hands-on support to help you through the pre-assessment steps, readiness planning process and more? Learn about our Consulting and Advisory Services which have been designed to provide additional guidance in completing this accreditation program.

“DirectTrust’s Privacy & Security accreditation not only lends credibility to our HISP services in the marketplace, it lets prospective customers know we are committed to adhering to the industry standards as far as the privacy, security and exchange of healthcare data. Their team was professional, helpful and a pleasure to deal with.”
-Scott A. Finlay, CEO, MaxMD

“I believe it is imperative in healthcare technology to be accredited by nationally recognized entities like DirectTrust. This proves to our stakeholders and the marketplace how seriously we take accountability on the secure and interoperable exchange of protected health information (PHI). The guidance we receive by being part of DirectTrust is immeasurable, and the comprehensive third-party review in areas of privacy, security, confidentiality, technical performance, business practices and organization resources allows our customers and partners to have assurance that Updox follows all required regulations.”
-Kathy Howard, Compliance Director, Updox

“As one of the largest Health Information Exchanges (HIEs) in New York State, Hixny must continuously ensure the confidentiality, availability, and integrity of the Protected Health Information (PHI) it has been entrusted with. DirectTrust’s Privacy & Security accreditation allows Hixny to demonstrate this to its various stakeholders, as the accreditation assesses the quality and strength of Hixny’s privacy and security framework through a plethora of controls across various domains. Hixny is proud to have achieved its original DirectTrust accreditation in 2014 and has successfully reaccredited on a biennial basis since. Their accreditation relies on a robust and informative framework. And, while the process requires a great deal of time and effort (as any robust framework should), we have found  the process to be very efficient, user friendly, and professional. We commend DirectTrust for their process and their knowledgeable and responsive staff!”
-Taiymoor J. Naqi, JD, MBA, CHP, Chief Compliance Officer & Vice President of Privacy and Security,Hixny