As a Business Associate handling Protected Health Information (PHI), we are committed to full compliance with HIPAA regulations and maintaining the security of all data we process.
At LGI, LLC, we are committed to protecting the privacy and security of the personal information we handle as a Business Associate. This Privacy Policy outlines how we collect, use, and safeguard Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA).
1. Collection of Information
We collect and process PHI on behalf of our healthcare clients as necessary to provide our services. This information may include, but is not limited to, patient names, medical records, billing information, and treatment details.
2. Use of Information
We use PHI solely for the purpose of providing the contracted services to our healthcare clients. We do not use or disclose PHI for any purpose not permitted or required by law or the agreement with our clients.
3. Data Security
We implement administrative, physical, and technical safeguards to protect PHI from unauthorized access, use, or disclosure. These measures include secure data storage, encryption, access controls, and regular security audits.
4. Sharing of Information
We do not share PHI with third parties, except as necessary to provide services or as required by law. Any third parties with whom we share PHI are contractually obligated to comply with HIPAA regulations and maintain the security of the information.
5. Individual Rights
Patients have the right to request access to their PHI, request amendments, and obtain an accounting of disclosures. Any such requests should be directed to the healthcare provider with whom the patient has a direct relationship.
6. Breach Notification
In the event of a data breach involving PHI, we will promptly notify our healthcare clients in accordance with HIPAA’s Breach Notification Rule and take steps to mitigate any harm.
7. Changes to This Policy
We may update this Privacy Policy as needed to reflect changes in our practices or regulatory requirements. Any updates will be posted on our website with the effective date clearly indicated.