Our organization is committed to protecting the privacy and security of protected health information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. This policy outlines our responsibilities and practices regarding the collection, use, and disclosure of PHI.
Collection and Use of PHI: We will only collect PHI that is necessary for treatment, payment, or healthcare operations. We will use and disclose PHI only as permitted or required by law, and will make every effort to limit the use and disclosure of PHI to the minimum necessary to accomplish the intended purpose.
Access and Authorization: Individuals have the right to access their PHI and to request an accounting of disclosures of their PHI. We will provide individuals with access to their PHI in a timely manner and in the form and format requested, if feasible. We will obtain an individual's written authorization before using or disclosing PHI for any purpose other than treatment, payment, or healthcare operations.
Safeguards: We will implement appropriate administrative, technical, and physical safeguards to protect PHI from unauthorized access, use, or disclosure. This includes, but is not limited to, secure storage of PHI, restricted access to PHI, and regular security updates and risk assessments.
Training and Education: We will provide training and education to all members of our workforce on HIPAA privacy and security requirements. We will also provide education to individuals about their rights with respect to PHI and our privacy practices.
Breach Notification: In the event of a breach of unsecured PHI, we will notify affected individuals and the Department of Health and Human Services (HHS) as required by law.
Complaints: Individuals have the right to file a complaint with us or with HHS if they believe their privacy rights have been violated. We will not retaliate against any individual for filing a complaint.
Contact Information: If you have any questions or concerns about our HIPAA compliance privacy policy, please contact our Privacy Officer at
This policy is subject to change as necessary to comply with changes in laws and regulations. We will post any updates to this policy on our website and provide notice to individuals as required by law.