RI Transcription Solutions is
committed to enforcing the patient privacy and security
requirements of the Health Insurance Portability and
Accountability Act (HIPAA); not only because it is the law, but also because we
believe in a patient’s right to be the sole owner of
his/her personal health information (PHI).
To this end, we have instituted the following practices:
|
|
1 |
All electronic transmission of patient
information, whether patient notes or demographic
information, is performed with 128-bit encryption (SSL).
This is done through secure websites, such as this one,
or a secure File Transfer Protocol (FTP).
|
|
2 |
We do not internally transmit patient data
via email because it is not secure. If a client requests
patient information to be transmitted via email, only
encrypted email is used. Should patient information be
required and a secure electronic method is not
available, we will fax the information, only if commonly
accepted, confidential fax procedures are followed.
|
|
3 |
All of our staff members sign confidentiality
statements and are trained in how to properly handle
patient data, including appropriate uses, behaviors to
avoid (such as talking about a patient) and proper
disposal of information. Before access to data is
provided, RI staff must pass a test on the training to
ensure that the material has been internalized, not just
discussed. The consequence of breaching our
confidentiality practices and/or HIPAA policies is
immediate termination.
|
|
4 |
We use physical, electronic and procedural
safeguards to protect any personally identifiable data
stored on our computers. Only authorized personnel have
access to sensitive data.
In addition, we are always looking to offer expanded
features that make our services more efficient and
accessible to our clients. As these additional functions
become available, this HIPAA statement will be updated
to correctly represent our latest procedures. Please
check this statement periodically, as it is subject to
change at any time.
|
|
 |
