HIPAA Compliance
Your privacy and the security of your health information are our top priorities.
Vitality Concierge Medicine is fully committed to compliance with the Health Insurance Portability and Accountability Act (HIPAA) and maintains the highest standards for protecting your protected health information (PHI).
Secure Storage
All electronic health records are stored on encrypted, HIPAA-compliant servers with regular security audits and backups.
Access Controls
Only authorized personnel have access to your health information, and all access is logged and monitored.
Training & Compliance
All staff members receive regular HIPAA training and certification to ensure ongoing compliance with privacy regulations.
Business Associates
All third-party vendors and business associates are required to sign HIPAA-compliant agreements before accessing any PHI.
What is HIPAA?
The Health Insurance Portability and Accountability Act (HIPAA) is a federal law that sets standards for protecting sensitive patient health information. HIPAA requires healthcare providers to:
- Maintain the confidentiality of protected health information (PHI)
- Implement appropriate administrative, physical, and technical safeguards
- Provide patients with rights regarding their health information
- Notify patients of any breaches of unsecured PHI
Our Commitment
At Vitality Concierge Medicine, we take HIPAA compliance seriously. Our comprehensive compliance program includes:
- Privacy Officer: Designated staff member responsible for HIPAA compliance
- Notice of Privacy Practices: Provided to all patients upon enrollment
- Employee Training: Regular training on HIPAA requirements and best practices
- Risk Assessments: Regular evaluations of our security measures
- Incident Response: Procedures for handling potential breaches
- Patient Rights: Processes for patients to exercise their HIPAA rights
Your Rights Under HIPAA
As a patient, you have the right to:
- Access: Request and receive copies of your medical records
- Amendment: Request corrections to your health information
- Disclosure Accounting: Receive a list of disclosures of your PHI
- Restrictions: Request limits on how we use or share your information
- Confidential Communications: Request alternate methods of communication
- Complaints: File a complaint if you believe your rights have been violated
Security Measures
We employ multiple layers of security to protect your information:
- Encryption of data in transit and at rest
- Secure, password-protected systems with multi-factor authentication
- Regular security audits and vulnerability assessments
- Secure disposal of physical and electronic records
- Controlled physical access to our facilities
- Regular updates to security software and systems
Breach Notification
In the unlikely event of a breach of unsecured PHI, we will notify affected individuals within 60 days as required by law. We will also notify the Department of Health and Human Services and, if applicable, local media as required.
Questions or Concerns
If you have questions about our HIPAA compliance practices or wish to exercise your rights under HIPAA, please contact our Privacy Officer:
Privacy Officer
Vitality Concierge Medicine
Phone: (865) 444-6227
Email: [email protected]
Address: 10321 Kingston Pike, Knoxville, TN 37922
You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you believe your privacy rights have been violated.