Back to Trust CenterPatient Privacy

Privacy / HIPAA

Privacy and HIPAA principles for Castellan Health patients, employers, and portal workflows.

Protected health information

Patient information is handled as protected health information when applicable. Records are shared with employers only according to authorization, applicable law, and service-specific reporting rules.

Employer documentation

Employer-facing documentation should be limited to the information needed for the specific occupational medicine workflow, such as clearance status, certificate delivery, chain-of-custody status, or work restrictions where appropriate.