HIPAA Compliance
Understanding our data scope — and why we handle no patient health information.
Last updated: · Data Methodology
Health Talent Staffing is not a HIPAA covered entity or business associate. We collect professional and business contact data only — no patient health information (PHI) is collected, stored, or transmitted on this platform.
Our Data Scope
This platform is a healthcare staffing marketplace — we connect employers with healthcare professionals. The data we collect is:
- Healthcare professional profiles: name, email, phone, specialty, location, experience, availability status
- Employer business contact information: company name, contact name, corporate email, phone
- Lead capture data from contact forms
We do not collect, process, store, or transmit:
- Patient names, medical record numbers, or diagnoses
- Protected Health Information (PHI) of any kind
- Patient treatment or billing records
Why No PHI?
HIPAA applies to covered entities (healthcare providers, health plans, healthcare clearinghouses) and their business associates that create, receive, maintain, or transmit PHI in performing functions on behalf of a covered entity. Health Talent Staffing does none of these things. Our platform is a staffing marketplace — the equivalent of a professional networking and job board for healthcare workers.
US Privacy Law Compliance
Although we are not a HIPAA entity, healthcare professionals are consumers under US state privacy laws. We comply with:
- CCPA/CPRA (California) — right to access, correct, delete, and opt out of sale/sharing
- Virginia CDPA, Colorado CPA, Texas TDPSA and other applicable state laws
Read our full Privacy Policy →
Security Practices
- TLS 1.2+ encryption in transit; data encrypted at rest
- Role-based access controls (RBAC) — PII access restricted by role
- Professional contact details hidden until a verified employer unlocks them
- Dual OTP verification (email + WhatsApp) for all lead submissions
- Regular security reviews and dependency scanning
Read our full Security Center →
Frequently Asked Questions
Is Health Talent Staffing a HIPAA covered entity?
No. Health Talent Staffing collects professional and business contact data only (names, emails, phone numbers, specialty, location, availability status). We do not collect, store, transmit, or process patient health information (PHI). Therefore we are not a HIPAA covered entity or business associate.
What data does Health Talent Staffing collect?
We collect professional and business contact information: names, email addresses, WhatsApp phone numbers, healthcare specialty, state/city, experience level, and availability status. We do not collect any patient information.
Does Health Talent Staffing comply with US privacy laws?
Yes. We comply with CCPA/CPRA (California) and applicable US state privacy laws. We provide data access, correction, and deletion rights to all users.
How is data protected on this platform?
All data is encrypted in transit (TLS 1.2+) and at rest. We use role-based access controls, OTP-verified lead capture, and regular security reviews. Professional PII is not exposed publicly until a verified employer unlocks it.
Contact
Questions about data handling: info@healthtalentstaffing.com