Effective Date: 28 September 2023

Introduction:

Capital Cardiology Associates is committed to protecting the privacy and security of our patients' protected health information (PHI) as required by the Health Insurance Portability and Accountability Act (HIPAA) and related regulations. This HIPAA Statement and Policy outlines our commitment to safeguarding PHI and explains how we collect, use, disclose, and maintain this information on our website and within our organization.

1. PHI Collection:

Capital Cardiology Associates may collect PHI from patients and website visitors through various channels, including online forms, appointment requests, patient portals, and email communications. PHI may include, but is not limited to, the following:

• Patient names

• Dates of birth

• Medical histories

• Health insurance information

• Contact information
  

2. Use and Disclosure of PHI:

We use and disclose PHI for the following purposes:

• Providing medical care and treatment

• Obtaining payment for healthcare services

• Conducting healthcare operations

• Complying with legal and regulatory requirements

• Administering our website and online services
  

3. Website Security:

We employ advanced security measures to protect the confidentiality and integrity of PHI collected on our website. This includes encryption, access controls, and regular security assessments.

4. Patient Rights:

Patients have the following rights regarding their PHI:

• Right to access their PHI

• Right to request corrections to their PHI

• Right to request restrictions on the use and disclosure of their PHI

• Right to receive an accounting of disclosures of their PHI

• Right to request confidential communications

• Right to file a complaint if they believe their privacy rights have been violated
  

5. Training and Compliance:

Capital Cardiology Associates provides training to employees and contractors to ensure compliance with HIPAA regulations. We regularly review and update our policies and procedures to maintain compliance.

6. Reporting Privacy Concerns:

If you have concerns about the privacy or security of your PHI or if you believe your privacy rights have been violated, please contact our Director of Operations, Patricia Dickson.

7. Changes to Policy:

Capital Cardiology Associates may update this HIPAA Statement and Policy as needed. Any changes will be posted on our website, and the revised policy will have an effective date.

Conclusion:

Capital Cardiology Associates is dedicated to maintaining the privacy and security of patient PHI in accordance with HIPAA regulations. If you have any questions or concerns about our HIPAA compliance or this policy, please contact our Director of Operations, Patricia Dickson.

By using our website and our services, you acknowledge that you have read, understood, and agreed to this HIPAA Statement and Policy.

Last Updated: 28 September 2023