PROFESSIONAL ACCOUNTABILITY UNDER LABOR CODE § 4907

TRAUMA COLLECT, INC. and its Hearing Representatives are authorized to appear before the California Workers’ Compensation Appeals Board (WCAB) pursuant to Labor Code § 4907, which provides:

> “The privilege of any person, other than an attorney admitted to practice in the Supreme Court of this state, to appear as a representative before the appeals board or any of its workers’ compensation judges may, after hearing, be removed, denied, or suspended by the appeals board for violation of this chapter, or of the rules of the appeals board, or of the administrative director, or for other good cause.”

(Labor Code § 4907(a))

> “For purposes of this section, non-attorney representatives shall be held to the same professional standards of conduct as attorneys.”

(Labor Code § 4907(b))

Emphasis added:

Trauma Collect’s representatives are legally bound to the same professional, ethical, and confidentiality standards as licensed attorneys.

The WCAB may remove or suspend that privilege for any violation of law, regulation, or professional conduct.

This structure guarantees accountability, transparency, and integrity in every case handled on behalf of our hospital clients.

---

DATA SECURITY, HIPAA & WORKERS’ COMPENSATION PRIVACY

TRAUMA COLLECT, INC. upholds the highest standards of data security and confidentiality for all Protected Health Information (PHI) connected to workers’ compensation claims.

Under 45 C.F.R. § 164.530(c)(1):

> “A covered entity must have in place appropriate administrative, technical, and physical safeguards to protect the privacy of protected health information.”

Under 45 C.F.R. § 164.512(l):

> “A covered entity may disclose protected health information as authorized by and to the extent necessary to comply with laws relating to workers’ compensation or other similar programs…”

Our Safeguards:

End-to-End Encryption: All PHI is stored on AES-256 encrypted, password-protected drives meeting HIPAA and NIST standards.

Secure Cloud Backup: Data is replicated to HIPAA-compliant, access-controlled servers to ensure continuity even if a device is lost or damaged.

Multi-Factor Authentication: Access requires password + verified secondary device.

Limited Access: Only assigned Trauma Collect personnel can access your facility’s data.

Compliance Agreements: All representatives execute binding HIPAA and confidentiality agreements as a condition of representation.

Clarification for Hospitals:

Even in the unlikely event of device loss or breach, Trauma Collect’s data remains encrypted, unreadable, and unusable to any unauthorized party.

Because workers’ compensation disclosures are specifically authorized under 45 C.F.R. § 164.512(l), and the data is encrypted per 45 C.F.R. § 164.402(2), such an occurrence would not constitute a reportable HIPAA violation.

Furthermore, records properly filed in WCAB proceedings are public documents, so the information involved is already lawfully disclosed within the workers’ compensation system.

In summary:

Your hospital’s information remains secure, compliant, and protected under both HIPAA and California law — even in the face of unexpected events.

DATA SECURITY & HIPAA COMPLIANCE

TRAUMA COLLECT INC. maintains strict safeguards for all Protected Health Information (PHI) related to workers’ compensation claims.

45 C.F.R. § 164.530(c)(1): “A covered entity must have appropriate administrative, technical, and physical safeguards to protect the privacy of PHI.”

45 C.F.R. § 164.512(l): “A covered entity may disclose PHI as authorized by and to the extent necessary to comply with laws relating to workers’ compensation…”

Safeguards:

🔐 AES-256 Encryption on all devices and cloud storage.

☁️ HIPAA-compliant servers with restricted, role-based access.

🧩 Multi-Factor Authentication and password protection.

📜 Mandatory HIPAA agreements for all representatives.

Clarification for Hospitals:

Even if a device were lost or compromised, all PHI remains encrypted, unreadable, and inaccessible.

Because workers’ comp disclosures are expressly authorized under 45 C.F.R. § 164.512(l), and encrypted data is excluded

from breach reporting under 45 C.F.R. § 164.402(2), such an event would not constitute a HIPAA violation.

Bottom Line:

Your hospital’s data stays secure, compliant, and protected by design and by law