HIPAA Standards

A&W Medical Transcription Service agrees that patient and client confidentiality are of utmost importance. A&W Medical Transcription Service subcontractors conform to HIPAA regulations by adhering to the following practices:

  1. No hard-copy documents will be disposed of without first shredding transcribed documents.
  2. A&W Medical Transcription Service subcontractors will create files and directories on computers in such a way as to prevent unauthorized viewing, deleting, or copying.
  3. Computers will also be configured to prevent unauthorized use, and security devices will be employed to prevent theft of computers.
  4. No client-related documents shall be sent from a computer without a minimum of 128-bit encryption.
  5. No patient or client names will be stored by A&W Medical Transcription Service in any form of database for use after termination of a client contract, unless requested

Once logged in to the web-based interface for uploading or downloading of voice files or transcribed notes, the entire session is protected by the highest-level browser-based 128-bit encryption algorithm, made possible by the Secure Socket Layer (SSL) digital certificates. All information and file transfers through the web-based interface pass through 128-bit encryption.

A&W Medical Transcription Service is committed to implementing the required policies, procedures and systems in response to the requirements of the HIPAA Final Rule of February 20, 2003. Under this regulation A&W Medical Transcription Service shall meet the requirements as set forth therein by the dates and deadlines imposed by the Final Rules. These areas include but are not limited to: (1) standards for administrative simplification, including the standards for electronic transactions, the national standard health care provider identifier, and the national standard employer identifier; (2) standards for electronic signatures and the security of electronic individually identifiable health information; and (3) standards for privacy of individually identifiable health information.

A&W Medical Transcription Service has developed and implemented the necessary Business Associate Agreements, protocols, methods, practices, software and the like which meet the security levels required for the maintenance of the confidentiality of PHI (Protected Health Information) as well as the security and encryption methods and applications to ensure the security of our systems, products, applications and networks.   A&W Medical Transcription Service believes that the continued successful implementation of the standards for administrative simplification in great part will depend on the parallel efforts of its business partners. Similarly, to the extent that protected information in A&W Medical Transcription Service databases is accessible to its business partners, the cooperation of those business partners has been essential in the design and implementation of the security mechanisms, such as for access control, authorization control, and user authentication. A&W Medical Transcription Service is prepared to work with its business partners who are HIPAA-covered entities to ensure the timely and effective implementation of our respective compliance plans. A&W Medical Transcription Service is committed to ensuring that its services, systems and operations can be integrated into a user environment that will support ongoing compliance with the electronic transactions, security, and privacy standards as currently regulated under the Final Rules of February 20, 2003. We look forward to perpetuating the development of tools needed to continually meet the evolving demands of consumers and federal regulations in the areas of security and privacy of PHI.

 

 

Copyright 2000-2007, A&W Medical Transcription Service. All rights reserved.