Username :
Password :
 
Forget Password? | Register Here

Sitemap | Contact Us
 

HIPAA @ SRP

 

SRP is committed to protecting the patient health and medical information. SRP complies with all regulations applying to electronic data exchange. All SRP employees and associates sign a non-disclosure/confidentiality policy. 

 

Our practices for data handling are given below:

 

We train all members of the workforce on HIPAA and organizational privacy policies, updating systems to ensure they provide adequate protection of patient data.

 

Employees sign confidentiality agreements. This agreement contains detailed data handling guidelines as well.

 

SRP has in place a storage and data backup system. This system offers full redundancy and achieves it by having servers with features such as 24x7 monitoring, firewalls, etc.

 

All employees accessing data have distinct Usernames and Passwords. Dictations and Transcripts can be only accessed by securely logging in.

 

There are unique Usernames and Passwords, and passwords changed frequently for security purposes.

 

System access and privileges are discontinued on termination or completion of contract/service.

 

SRP does not allow hard copy data exchange.  PHI or any other type of patient data exchange for business purposes is always done using Secure FTP or SSL.  SRP does not permit E-mail to send or receive any patient data.

 

 

Health Insurance Portability and Accountability Act - An Overview

 

The Health Insurance Portability and Accountability Act (HIPAA) was enacted by the U.S. Congress in 1996. According to the Centers for Medicare and Medicaid Services (CMS) website, Title II of HIPAA, known as the Administrative Simplification (AS) provisions, requires the establishment of national standards for electronic health care transactions and national identifiers for providers, health insurance plans, and employers.

 

The provisions also address the security and privacy of health data. The standards are meant to improve the efficiency and effectiveness of the nation's health care system by encouraging the widespread use of electronic data interchange in the US health care system.

 

The Privacy Rule establishes regulations for the use and disclosure of Protected Health Information (PHI). PHI is any information about health status, provision of health care, or payment for health care that can be linked to an individual. This is interpreted rather broadly and includes any part of a patient’s medical record or payment history.

 

 

 

At SRP, HIPAA is an on-going initiative. For clarifications related to SRP's compliance with HIPAA, please contact hipaa@ajmeragroup.net




Copyright © 2008 Ajmeragroup. All Rights Reserved