HIPAA Compliance
1. Our Commitment to HIPAA Compliance
Cognera Health is committed to maintaining the highest standards of HIPAA compliance to protect your Protected Health Information (PHI). We implement comprehensive security measures and regularly update our practices to ensure compliance with all HIPAA regulations.
2. HIPAA Security Measures
2.1 Administrative Safeguards
- Regular risk assessments and management
- Workforce security and training
- Information access management
- Security incident procedures
- Contingency planning
2.2 Physical Safeguards
- Facility access controls
- Workstation and device security
- Data backup and storage
- Hardware inventory and control
2.3 Technical Safeguards
- Access control and authentication
- Encryption and decryption
- Audit controls and logging
- Integrity controls
- Transmission security
3. Protected Health Information (PHI)
We protect all forms of PHI, including:
- Medical records and history
- Treatment information
- Payment information
- Insurance details
- Demographic information
- Test results and lab reports
4. Business Associate Agreements
We maintain Business Associate Agreements (BAAs) with all third-party vendors who may have access to PHI, ensuring they:
- Maintain appropriate safeguards
- Report security incidents
- Return or destroy PHI when contract ends
- Comply with HIPAA Security Rule
5. Patient Rights
Under HIPAA, you have the right to:
- Access your health information
- Request corrections to your records
- Receive a notice of privacy practices
- Request confidential communications
- File complaints about privacy violations
- Receive an accounting of disclosures
6. Security Incident Response
We maintain a comprehensive security incident response plan that includes:
- Immediate incident assessment
- Containment procedures
- Notification protocols
- Recovery and prevention measures
7. Contact Information
For HIPAA-related inquiries or concerns, please contact our Privacy Officer at info@cognerahealth.ai
8. Compliance Updates
We regularly review and update our HIPAA compliance measures to align with the latest regulations and industry best practices. Our team undergoes regular training to ensure we maintain the highest standards of privacy and security.