Are outsourced healthcare call centers required to protect my medical information?

Answer:

Healthcare providers and health plans have obligations to protect protected health information under HIPAA. When an outside company performs certain services involving that information, it may be considered a business associate and generally must have appropriate contractual safeguards in place, including a business associate agreement when required. Providers should also understand how subcontractors and AI systems access, use and store patient information.