At HealthUnits, we are fully committed to maintaining the privacy, security, and confidentiality of all Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and all applicable federal and state regulations.
This HIPAA Compliance Statement outlines our dedication to safeguarding PHI and ensuring that all processes, systems, and personnel strictly adhere to HIPAA Privacy Rule, Security Rule, Breach Notification Rule, and Enforcement Rule.
Our Commitment to HIPAA Compliance
1. Protection of PHI
We implement strict administrative, physical, and technical safeguards to prevent:
- Unauthorized access
- Loss or misuse of PHI
- Disclosure of patient information without proper authorization
- Unlawful alteration or destruction of health data
PHI is only accessed by authorized personnel who require it to perform their assigned duties.
2. Secure Data Handling
HealthUnits follows industry-standard measures including:
- Encrypted data transmission and storage
- Secure access controls
- Multi-factor authentication (where applicable)
- Regular audits and security risk assessments
- Continuous monitoring of system activity
All electronic PHI (ePHI) is protected through secure cloud systems and compliant technologies.
3. Employee Training & Accountability
All employees, contractors, and virtual medical assistants undergo:
- HIPAA awareness training
- Confidentiality and data protection training
- Annual refresher courses
- Strict enforcement of policies through disciplinary measures
Only trained and authorized staff may access PHI.
4. Business Associate Agreements (BAA)
HealthUnits signs Business Associate Agreements with:
- Healthcare providers
- Vendors
- Partners
- Subcontractors
No PHI is shared with any third party unless a valid BAA is in place and HIPAA compliance is guaranteed.
5. Minimum Necessary Standard
We follow the “minimum necessary rule,” ensuring:
- Only essential information is accessed
- Only required data is shared to perform service tasks
- Restricted access roles for all employees
We avoid unnecessary use or disclosure of PHI.
6. Breach Prevention & Response
In the event of a suspected or actual breach:
- HealthUnits follows a documented breach response protocol
- Affected parties are notified in accordance with HIPAA Breach Notification Rule
- Full investigation and corrective actions are taken immediately
We prioritize transparency and swift action to protect patient information.
7. Patient Rights
We support all patient rights under HIPAA, including:
- Right to access their PHI
- Right to request corrections
- Right to restrict disclosures
- Right to receive an accounting of disclosures
- Right to confidential communication
Patients may contact us anytime to exercise these rights.
8. Continuous Improvement
HealthUnits continually upgrades its:
- Security technologies
- Compliance protocols
- Staff training programs
- Privacy safeguards
We stay updated with HIPAA regulations and implement best practices to maintain full compliance.
Contact for HIPAA Compliance
For questions, concerns, or reporting potential HIPAA-related issues, please contact:
HealthUnits
Email: info@healthunits.com
