Security & Safeguards · Company commitment
The company has policies to keep PHI secure and will tell you of a breach it believes occurred
The company says it is dedicated to protecting PHI and has set up policies and information practices to keep it secure and private. If the company believes a member's PHI has been breached, it says it must tell the member.
Supporting quotations
We’re dedicated to protecting your PHI, and we’ve set up a number of policies and information practices to help keep your PHI secure and private.
If we believe your PHI has been breached, we must let you know.
Qualifications & exceptions
- The notice duty depends on the company believing a breach occurred.
Not stated here
- The text does not say how or how quickly the member would be told.
Security & Safeguards · Company practice
Physical, electronic and staff safeguards protect PHI
The company says it keeps oral, written and electronic PHI safe using physical and electronic procedures that follow federal and state laws. Examples include securing offices that hold PHI, password-protecting computers and locking storage areas and filing cabinets. Employees must protect PHI under written policies, access is limited to employees who need the data for their jobs, and employees must wear ID badges to keep unauthorized people out of areas where PHI is kept.
Supporting quotations
We keep your oral, written, and electronic PHI safe using the right procedures, and through physical and electronic ways. These safety measures follow federal and state laws. Some of the ways we keep your PHI safe include securing offices that hold PHI, password-protecting computers, and locking storage areas and filing cabinets.
We require our employees to protect PHI through written policies and procedures. These policies limit access to PHI to only those employees who need the data to do their jobs. Employees are also required to wear ID badges to help keep unauthorized people out of areas where your PHI is kept.
Qualifications & exceptions
- The measures are "some of the ways", not a complete list.
Not stated here
- The text does not mention encryption standards or independent audits.