HIPAA Privacy and Security Policy
Effective Date: o5/01/2024
MediCaddie is committed to safeguarding the privacy and security of Protected Health Information (PHI) in full compliance with the Health Insurance Portability and Accountability Act (HIPAA). We prioritize maintaining the confidentiality, integrity, and availability of PHI through robust administrative, physical, and technical safeguards. This policy outlines our approach to privacy, security, compliance, breach reporting, auditing, and contact procedures.
Privacy
- Permitted Use and Disclosure: PHI will only be used or disclosed as permitted or required by law.
- Safeguards: We employ administrative, physical, and technical measures to prevent unauthorized access, use, or disclosure of PHI.
- Individual Rights: MediCaddie respects the rights of individuals to access, amend, or receive an accounting of disclosures of their PHI in accordance with HIPAA regulations.
Security
- Safeguards: We have implemented stringent measures to protect against unauthorized access, use, disclosure, alteration, or destruction of PHI.
- Continuous Improvement: Security measures are regularly reviewed and updated to address emerging threats and ensure ongoing compliance with HIPAA standards.
- Data Protection: All PHI is encrypted during transmission and storage, ensuring maximum protection against unauthorized access.
Compliance
- Regulatory Adherence: MediCaddie complies with all applicable federal and state laws, as well as HIPAA regulations.
- Training and Awareness: Our workforce members receive regular training on HIPAA regulations and MediCaddie’s privacy and security policies.
- Documentation: Comprehensive records of all HIPAA-related activities, policies, and procedures are maintained as required by law.
Reporting Breaches
- Breach Notification: In the event of a breach involving unsecured PHI, MediCaddie will promptly notify affected individuals, the Secretary of the Department of Health and Human Services, and, when required, the media.
- Mitigation Efforts: Immediate steps will be taken to minimize the harm caused by any breach and to prevent recurrence.
Auditing and Monitoring
- Periodic Audits: Regular internal audits will be conducted to ensure adherence to this policy and HIPAA requirements.
- Corrective Action: Any identified violations will be promptly addressed, and corrective actions will be implemented.
Contact Information
If you have questions, concerns, or require further information about this policy or MediCaddie’s compliance with HIPAA, please contact us at:
Email: privacy@medicaddie.com
Mailing Address: Medicaddie Technologies LLC
158-13 72nd Ave
New York, NY 11365
USA
MediCaddie Technologies LLC is dedicated to protecting PHI and fostering trust through our unwavering commitment to privacy and security.