Standing Stone is committed to conducting its business with integrity and in compliance with all applicable health information privacy laws, including but not limited to the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"). Failure to comply with these laws could result in violations of existing contractual arrangements and, in some circumstances result in criminal, civil and administrative sanctions to individual employees and Standing Stone. Standing Stone can meet its commitment to compliance only through the efforts of its directors, officers, managers, employees and contractors, each of whom must perform his or her duties on behalf of Standing Stone with honesty and integrity. Although each individual ultimately is responsible for his or her own conduct, Standing Stone is committed to maintaining a working environment that fosters conduct consistent with these ideals and permits Standing Stone to meet the highest ethical standards in conducting its business.
Standing Stone HIPAA Compliance Program
As part of Standing Stone's commitment to health information privacy compliance, and in an effort to assist Standing Stone personnel in meeting their compliance obligations, Standing Stone has established a HIPAA Compliance Program. This HIPAA Compliance Program is designed to prevent violations of applicable health information privacy laws such as HIPAA and, where such violations occur, to promote their early and accurate detection and prompt resolution through education, monitoring, disciplinary action and other appropriate remedial measures.
Standing Stone's HIPAA Compliance Program, which draws upon and complements many of our existing practices and procedures, has the following components:
- Standing Stone has appointed a Privacy Officer who is responsible for implementing, monitoring and maintaining the HIPAA Compliance Program..
- Standing Stone has developed and periodically reviews its detailed policies and procedures with respect to HIPAA compliance.
- Standing Stone provides all of its employees with compliance education and training.
- Standing Stone monitors compliance on a regular basis.
- Standing Stone utilizes a combination of physical, administrative and technical safeguards to protect the security of confidential health information. All of Standing Stone's applications have the capability to receive and send encrypted data. Standing Stone's hosting facility is physically safeguarded with a secured access requiring both physical and biometric safeguards. All data is routinely backed up and stored in a controlled, secure facility. Access to data on the Standing Stone host system is password protected and provided only on an as-needed basis based on job function. Access by users is routinely monitored.
49 Richmondville Avenue, Westport, CT 06880 Tel: (800) 648-9877 E-mail: info@standingstoneinc.com
