Policies
General position on implementation or compliance
with HIPAA and other privacy laws
- We will not sell or provide secure proprietary information input by customers to any outside parties.
- We will protect and enhance consumer's rights of access to information.
- Clients' Protected health information may be used only for treatment, payment, or healthcare operations. All other uses and disclosures will be by authorization only and the patient may revoke said authorization.
- We will not use or disclose an individuals' protected health information except as otherwise permitted and/or required by HIPAA.
- All of our patients will receive and acknowledge this Privacy Notice. It is also available for the asking by mail, and posted in a clear and prominent place in our offices.
- We will make reasonable efforts to limit disclosure of protected health information as much as possible.
- Continuing compliance with HIPAA will be achieved through ongoing assessment, oversight and informational training, as coordinated through the privacy officer.
- Our medical director shall address all complaints received from patients, clients, employees or third parties in an expeditious and meaningful manner.
- We respect the rights of individuals, including employees, to make complaints, ask questions or inquire as to our compliance with HIPAA and other privacy laws.
- No adverse action or retaliation shall be taken against any such individual or employee based on any legitimate complaint, question, or inquiry.
- We will specify the protected health information to which they require access and make reasonable efforts to limit their access accordingly.
- We will identify those members of our workforce who require access to protected health information to perform their duties.
- All employees will be trained in order to be HIPAA compliant.
- Employees, who fail to follow HIPAA requirements and/or our policies with respect to privacy rules, shall be sanctioned appropriately. Such sanctions may range from oral reprimand to termination.
- Any intentional breach of patient confidentiality, not permitted by law, shall be severely punished. All such sanctions shall be documented, in writing.
- To the extent practicable, we will mitigate the harmful effects of any known use or disclosure that is in violation of the above outlined policies.