HIPAA & CMS

Complying with CMS and HIPAA regulations with respect to the transmission of patient data using the Internet

Security and privacy of information are paramount considerations for health care organizations when migrating their information systems to the Internet. Wescom is also fully committed to security, privacy, confidentiality and availability of protected health care information, and goes beyond mere regulatory compliance in this endeavor. PointClickCare.com can assist customers with their HIPAA compliance initiatives.

Both HIPAA and CMS policies allow use of the Internet to transmit data provided that two basic requirements are met; the system must provide an acceptable method of encryption and user authentication. In addition, Privacy Regulations dictate that health care providers enter into Chain of Trust agreements with all "Business Associates" that may require periodic access to patient information.

Wescom’s PointClickCare.com service meets these requirements by employing both Secure Socket Layer (SSL) and Digital Certificate technology. Together, they provide the strongest level of security available for communications between customer computers and the PointClickCare.com data center. A detailed description of our layered approach to security can be found below.

In addition, from time to time, Wescom may require access to protected health information in the course of providing support services. This type of access is covered in HIPAA’s final privacy regulations which define other parties that have access to a health care entity’s protected information - whether directly or indirectly - as "business associates". Under the regulation, a written contract is required between a covered entity and its business associates in order for those business associates to receive information from or on behalf of the covered entity. The PointClickCare.com Subscription Service agreement includes a Privacy clause that binds Wescom to the same use and disclosure limitations as those that our customers require.

    Articles
January 2003 - HIPAA Compliance Statement (PDF Format)







  For more information, please call 1-800-277-5889 or contact us privacy | legal