Purpose

This HIPAA policy outlines the procedures and guidelines that Miami Dermatology and Mohs Surgery PLLC (hereafter referred to as “the Practice”) is required to follow in order to maintain the privacy and security of its patients’ protected health information (PHI). This policy serves as a commitment to our patients that we take the protection of their personal health information seriously.

Definitions

• Protected Health Information (PHI) refers to any individually identifiable health information created, received, maintained, or transmitted by the Practice in the course of providing healthcare services.

• Business Associate refers to any individual or entity that performs functions or activities on behalf of the Practice that involve the use or disclosure of PHI.

Responsibility

The Practice is responsible for implementing and maintaining privacy and security safeguards for all PHI in accordance with the Health Insurance Portability and Accountability Act (HIPAA) regulations. The Practice will periodically review its policies and procedures to ensure they are current and effective.

Access to PHI

The Practice will limit access to PHI only to those employees who need it to perform their job duties. All employees will receive training on the Practice’s HIPAA policies and procedures and sign an agreement to follow them.

Disclosure of PHI

The Practice will only disclose PHI for treatment, payment, or healthcare operations purposes or as required by law. The Practice will obtain written authorization from the patient before disclosing PHI for any other purpose.

Security Measures

The Practice has implemented technical, physical, and administrative safeguards to protect the privacy and security of PHI. The Practice also requires its business associates to implement appropriate safeguards for PHI.

Breach Notification

In the event of a breach of PHI, the Practice will notify affected individuals and the U.S. Department of Health and Human Services within 60 days of discovering the breach.

Patient Rights

• Patients have the right to access and receive a copy of their PHI.

• Patients have the right to request restrictions on the use and disclosure of their PHI.

• Patients have the right to receive an accounting of disclosures of their PHI.

• Patients have the right to file a complaint if they believe their privacy rights have been violated.

Enforcement

The Practice will take appropriate action against any individual or entity who violates its HIPAA policies and procedures. This may include termination of employment or contract.

Amendments

The Practice reserves the right to change its HIPAA policy as needed. Any changes will be promptly communicated to patients and posted on the Practice’s website.

Questions?

If you have any questions about these terms and conditions, please contact Miami Dermatology and Mohs Surgery, PLLC at info@miamiderms.com.