Direct Mail, Design, and Professional Printing FAQs

Kessler Creative has been HIPAA-HITECH Assessed, as there is no official HIPAA certification process.

As a HIPAA defined business associate, Kessler Creative provides services for our clients and customers while fully meeting the HIPAA Privacy and Security Rules and HITECH Act required for business associates. We undergo an annual security risk assessment by a qualified independent third-party firm, demonstrating our commitment to achieving a verified standard for administrative, physical and technical practices and procedures.

Kessler Creative provides our customers the security of knowing their vital data will be securely received, maintained and deleted according to defined, audited procedures. Our practices and systems are designed to secure and protect critical healthcare data, electronic protected health information (ePHI) and customer/client data files.

Kessler Creative makes protecting our client’s data a priority, and we make it easy. Whether your data is HIPAA controlled or not our protocol is to transfer all marketing mail list data files securely through the Citrix ShareFile platform using TLS 1.2 or higher encryption protocols and in storage using AES 256-bit encryption.

Follow these Step-by-Step Data Transfer Instructions (Used for All Data Files)

1. Your Kessler Creative account executive will email you access to a Citrix ShareFile transfer folder through the system.
2. Sign In by using your email address and creating a password meeting the Citrix ShareFile platform requirements as instructed.
3. Drag and drop your file into the folder or browse your file locations to locate the item you want to transfer and open the file to upload.
4. Once your file is uploaded, simply log out. That’s it!
5. You have securely transferred your files using TLS 1.2 or higher encryption protocols and AES 256-bit encryption.

Kessler has a Training Policy for Employees and Annual Risk Assessment

All Kessler Creative employees are thoroughly trained to follow secure data handling procedures. Our employees also receive ongoing training to introduce and raise awareness of the policies and procedures governing access to ePHI, how to identify malicious software attacks, malware and malevolent emails. Additionally, we routinely send via email and post security awareness information to inform our staff of security and privacy-related issues.

Additionally, Kessler performs monthly vulnerability scans. Remediation of vulnerabilities are remediated, and rescanning is conducted.

Lastly, Kessler Creative engages a third-party IT auditor to conduct an annual privacy and security risk assessment of our policies, procedures and practices. We have implemented all the appropriate safeguards to protect ePHI at rest and in transit, and have policies and procedures in place to prevent and detect unauthorized disclosures.

Audited HIPAA HITECH Practices

Kessler Creative is audited annually by the qualified third-party auditor identified below:

Tampa Bay Compliance, Inc.
4532 W. Kennedy Blvd., Suite 110, Tampa, Florida 33609
Contact: Lee Adams
Telephone: (800) 327-2279
Email: la****@****************ce.com

Have a HIPAA Question? At any time, contact our HIPAA Compliance Officers:

Dan Smith
Director of IT & Chief Security Officer
Telephone: (904) 256-4467
Email: ds****@*************ve.com

Physical Address:
Kessler Creative
Attn: HIPAA Compliance Department
12276 San Jose Blvd., Suite 111
Jacksonville, Florida 32223
Toll-Free: (800) 397-9393