BD - Earth day 2024

Exco InTouch approved fully complaint with NIST guidelines following successful completion of HIPAA Privacy audit

Tuesday, July 19, 2016

Exco InTouch, the leading provider of patient engagement and data capture solutions for clinical research and healthcare providers, today announced that it has successfully undergone and completed an independent audit to assess compliance utilizing the National Institute of Standards and Technology (NIST) guidelines for Health Insurance Portability and Accountability Act (HIPAA), formally completing the independent auditing process for Privacy & Security.

HIPAA rules constitute a set of regulations from the US Department of Health & Human Services relating to any Protected Health Information (PHI) that identifies health or financial data of US citizens stored on computer systems. The Security Rule specifies a series of administrative, physical, and technical safeguards for covered entities and their business associates to use to assure the confidentiality, integrity, and availability of electronic PHI.

Exco InTouch is an industry leader in the field of data privacy and security – viewing this as an essential component in achieving patient trust. Earlier this year, through its partnership with Regulatory Strategies, Exco InTouch introduced a fully compliant regulatory officer function two years ahead of the General Data Protection Regulation (GDPR) coming into effect

Dale Jessop, Chief Technology Officer at Exco InTouch commented “Privacy, Security and the protection of personal information remain the highest priority for Exco InTouch. Whilst no formal certification for HIPAA exists, we have taken the approach to be independently audited against NIST guidelines for HIPAA, both on security and more recently privacy provides further reassurance to our customers that Exco InTouch business operations are aligned to comply with HIPAA standards.”

Tim Davis, CEO and co-founder of Exco InTouch added “I am extremely proud of the team involved throughout the audit process, and also that of the 64 HIPAA security citations and the 20 HIPAA privacy citations applicable to our business, no findings were reported". As a result of this audit, Exco InTouch customers (for whom the company provides mobile and digital patient engagement solutions), can continue to be assured that their programs comply with these stringent privacy and security safeguards.

About Exco InTouch

Exco InTouch is the leading provider of digital patient engagement and data capture solutions for clinical research and healthcare providers. Using a combination of software and services, Exco InTouch solutions provide simple, secure channels of communication; facilitating the collection of quality data and improving outcomes for sponsors, clinical research organizations, sites and patients.

Working across clinical and late phase trials and commercial Health programs, Exco InTouch’s device inclusive approach enables involvement which integrates into daily life - resulting in motivated and compliant patients, reducing costs associated with withdrawals from trials and improving overall program results.

Since 2004, Exco InTouch has engaged with over 1 million patients across 97 countries, over 26,000 hospitals and clinics, in 70 languages. 16 of the top 20 pharmaceutical companies have deployed our trusted applications in the knowledge that data is secure and protected, in line with global regulatory and data protection requirements.