It is the policy of Sleep Solutions to be fully compliant with federal HIPAA Privacy Regulations. The Privacy Regulations establish national standards regarding uses and disclosures of protected health information. The purpose of these pages is to provide access to our Privacy Policies and Procedures and other helpful tools and information regarding HIPAA.

What is the purpose of the HIPAA Privacy Regulations?

The purpose of the Privacy Regulations is to set minimum national standards regarding the confidentiality of individuals' protected health information. "Protected health information" is any individually identifiable health information, including billing and demographic information, that is transmitted or maintained in any form or medium.

The Privacy Regulations give patients important rights. What are they?

Pursuant to the HIPAA Privacy Regulations, patients have the right to:

1. Receive a copy of the Notice of Privacy Practices;
2. Request restrictions on disclosures of protected health information ("PHI");
3. Request alternative means of communicating PHI;
4. Inspect and obtain copies of PHI;
5. Request amendments to PHI; and
6. Receive an accounting of disclosures of PHI.

What administrative requirements has the company implemented?

Pursuant to the HIPAA Privacy Regulations, the company has:

1. Appointed a Privacy Officer with management authority;
2. Developed and implemented privacy policies and procedures;
3. Trained the Sleep Solutions workforce;
4. Adopted privacy safeguards; and
5. Established a reporting process for privacy violations.

What protections have been implemented for medical records?

HIPAA compliance has been built into Sleep Solutions systems and processes.

1. Role-Based Authentication: Access to records, files and data is denied unless it is absolutely necessary for the person to perform a specific job function.
2. Access Recording and Auditing: Personnel authorized to access a medical record will leave an audit trail for review by supervisory personnel. Any change to a patient's record will record the date, time and person who made the adjustment.
3. Encryption and De-Identification. For transfer or transmission to medical providers, payors/insurers or medical researchers, Sleep Solutions will encrypt files and/or withhold information that could identify a record as belonging to a specific individual.
4. Data Integrity: Information will be protected from unauthorized access through security controls as well as physical restriction through storage in a protected data center. Accidental deletion or destruction will be prevented through secure data archiving.