compliance

compliance

The Health Insurance Portability and Accountability Act (HIPAA) of 1996 insists that any organization that stores or transmits patient information must take enterprise-wide steps to adhere to HIPAA's sweeping privacy, security and transactions standards.

Essentially, HIPAA requires healthcare entities to ensure that they protect personal health information and the privacy rights of patients.

Under HIPAA’s Privacy Rule, Proskribe Services falls under the extension of Business Associate. A Business Associate (BA) is any person(s) or entity, which performs a function or activity on behalf of a Covered Entity (CE) and involves the use or disclosure of Protected Health Information (PHI).

The services at Proskribe Services designed to assure HIPAA compliance in the following way:

• Every employee at Proskribe Services has to sign a confidentiality agreement, the terms of which state that they agree not to use, publish or disclose, or permit others to use, any confidential information they may come in contact with. Violation of this agreement warrants termination.
• Entry of employees into the facility is controlled by access/swipe cards provided to every employee. This facility is manned 24 X 7 and unauthorized intrusion is practically impossible.
• Access to critical areas such as the server room is restricted and only authorized personnel have entry rights to these areas.
• Internet/Email access is provided to only authorized personnel. Access to computer systems is restricted by logins and passwords, which is unique for every employee.
• All paper containing PHI data is shredded before being disposed off.
• Connection to the client’s servers through secure VPN tunnels with 128-bit encryption.
• Regular back-up of data is taken and stored off-site as per company policies.
• A dedicated Compliance Officer ensures compliance management processes, which are updated regularly and are stringently adhered to.