Effective Date: 14 JANUARY 2025

CompassionCare Concierge   is committed to safeguarding your Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA).

Types of PHI Collected

We collect and process the following types of PHI:

Personal details such as name, address, phone number, and date of birth.

Insurance and billing information.

Laboratory requisition forms and specimen details.

Test results where applicable.

Safeguards for PHI

We employ the following measures to protect your PHI:

Use of HIPAA-compliant CRM software (THRYV) and secure phone systems (OOMA).

Role-based access controls to restrict PHI access to authorized personnel only.

Encryption of electronic records and secure storage of physical records.

Employee Training

All employees are trained on HIPAA regulations and must adhere to strict confidentiality protocols. Breaches of these protocols are grounds for disciplinary action, including termination.

Business Associate Agreements (BAAs)

We partner with accredited laboratories and third-party service providers under BAAs that ensure HIPAA compliance.

Data Breach Response

In the event of a data breach:

Affected clients will be notified within 72 hours via email.

Details of the breach, including scope and mitigation measures, will be provided.

Steps will be taken to prevent future occurrences, including enhanced security measures and employee retraining.

SMS Messaging and HIPAA Compliance

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Communications, including appointment reminders and updates, may be sent via SMS messaging. Patients consent to this communication method unless they opt out by replying "STOP." We ensure that all SMS communications comply with HIPAA privacy and security standards.

Your Rights Under HIPAA

You have the right to:

Access and obtain a copy of your PHI.

Request corrections to your PHI.

Receive an accounting of disclosures of your PHI.

File a complaint if you believe your rights have been violated.

To exercise these rights, contact us at support@compassioncareconcierge.com

Updates to This Policy

We reserve the right to update this policy as needed to reflect changes in regulations or business practices. Clients will be notified of significant updates through our website or direct communication.