AdvancedMD APCM HIPAA Compliance Checklist

Limit APCM dashboard access to authorized clinical and billing staff only within the AdvancedMD user settings.

Regularly review AdvancedMD audit logs for unauthorized access to APCM-eligible patient records and sensitive PHI.

Ensure all staff accessing AdvancedMD from home use secure VPNs and multi-factor authentication protocols.

Promptly deactivate AdvancedMD accounts for staff no longer managing APCM outreach to prevent legacy access.

Configure AdvancedMD to automatically log out after periods of inactivity to prevent data exposure in the clinic.

Verify a signed BAA is in place with your AI call center provider before sharing any PHI from AdvancedMD.

Confirm all API integrations between AdvancedMD and AI tools use end-to-end encryption for all data packets.

Ensure AI outreach tools only access the specific patient data fields needed for APCM coordination tasks.

Use AdvancedMD templates to record patient consent for AI-driven phone and text communications for APCM.

Ensure any data used for APCM reporting analytics is de-identified where possible to reduce risk.

Ensure APCM time-tracking in AdvancedMD matches the required CMS documentation standards for G-code reimbursement.

Restrict access to the AdvancedMD billing module to prevent unauthorized financial data exposure to clinical staff.

Securely handle ERA files within AdvancedMD to protect patient payment information and claim details.

Conduct monthly internal audits of APCM claims generated through AdvancedMD billing to identify errors.

Verify that chronic condition codes in AdvancedMD support the medical necessity for APCM services provided.