HIPAA and Sensitive Information Notice

Purpose

Serenium is an on-demand healthcare workforce marketplace. This Notice explains how users must handle patient-identifiable information and other sensitive healthcare information on the Platform. It is not a healthcare provider’s Notice of Privacy Practices and does not replace a Business Associate Agreement.

Permitted information

Users may submit protected health information only through a workflow Serenium expressly designates for that purpose and only when legally authorized. Scheduling, credentialing, ordinary chat, general support, and profile fields must not contain unnecessary patient-identifiable information.

Minimum necessary

• Use the minimum information reasonably necessary for the authorized task.
• Do not upload full medical records unless the designated workflow expressly requires them.
• Do not photograph, record, download, or store patient information on personal devices.
• Verify recipients and access permissions before sharing sensitive information.

Security and incidents

Users must protect accounts and approved devices, use role-based access, and immediately report misdirected information, unauthorized access, lost devices, or suspected breaches to support@sereniumhealthcare.com. Emergencies involving patient safety must also be reported through the Facility’s required clinical process.

HIPAA roles

When Serenium performs a regulated business-associate function, the applicable BAA governs permitted uses, safeguards, subcontractors, incident reporting, individual-rights support, and return or destruction. A Facility remains responsible for its treatment records, patient notices, clinical systems, and workforce access.

Contact

Privacy and security questions: support@sereniumhealthcare.com.