HIPAA Compliance

What is HIPAA?

HIPAA also known as Health Insurance Portability and Accountability Act 1996 is a federal law that all patient health information is secured and private. All health care providers, and staff in the business have to take steps to protect confidential patient data and maintain high standards of data security.

Why is it important?

HIPAA Compliance is necessary to protect the privacy and trust of our patients. Making sure that all sensitive data doesn't prevent unauthorized access and also safety between patients and healthcare providers. Non-compliance can cause significant penalties and data breaches.

How Our Business Complies with HIPAA?

At Hope Psychiatric Mental Health, we take the HIPAA seriously when handling patients' information. The whole business follows strict procedures to ensure all protected health information (PHI) is kept in a secure place. In our systems we use data handling practices, including encryption for data storage and transfer, limiting access to authorized personnel only, and following secured protocols.

Security Measures:

Hope Psychiatric Mental Health we use protocols to secure all electronic protected Health Information (ePHI). Any data transferred or stored in our system is protected from unauthorized access.
There is strict access that only authorized personnel can access PHI, including user ID's, passwords, and verifying user identities.
Patient data is backed up and secure and ensured that all information is recovered quickly from disasters or system failure. Physical security measures protected from PHI are stored in a filing system and in a restricted area.

Patient Rights

Patients have the right to request any limitations on how their PHI is used or shared. We will review your requests and make any changes if necessary.
If you think your health information is inaccurate or incomplete, please notify us if there are any issues.
You have the right to all health matters that are communicated in a confidential way. Providing records of when and to whom we have shared your information for treatment, payment, or healthcare options.
If you feel in any way that your privacy rights have been violated. You do have the right to file a complaint with us or with the U.S Department of Health and Human Services. We are committed to protect your privacy and to fix any concerns.
Notify us if there are any breaches with your protected health information. We will address the situation and take note about it in the future. Therapist or providers are not responsible for breaches of confidentiality caused by an independent third party or by us.

Breach Notification Protocol

Potential breaches that occur, we will investigate to determine the incident, identify who is affected, and assess the risk to their PHI.
If a breach were to occur, we would investigate the situation, describe how it occurred, and who's PHIs were involved, steps on how to protect yourself from potential harm.
We will notify the U.S Department of Health and Human Services and any regulations that are required from HIPAA Compliance.
An impact that occurs from a breach, we will offer assistance to individuals that are affected. The business will come up with additional security protocols and staff training to help prevent breaches accruing in the future.