MedZed Privacy Statement
​
MedZed maintains a process to ensure compliance with applicable provisions of the Health Insurance Portability and Accountability Act (HIPAA) as required by 45 C.F.R. Section 164.524 and Subpart E and, where applicable, the HITECH Act. Our goal is to provide the highest level of service to our clients and their enrolled members.
MedZed respects the privacy of Protected Health Information (PHI) and understands importance of keeping this information confidential and secure. Our Information Security and Compliance policies effectively address the protection, use and disclosure of PHI, accounting of disclosures, access by individuals and third parties to PHI, protection of PHI by contractors, business associate agreements and training of employees.
Based on our policies, MedZed:
-
Employs the highest security standards to protect the confidentiality, integrity, and availability of protected information
-
Limit access to protected information on a “need to know” basis
-
Trains our staff upon hire and on an ongoing basis to recognize the importance of safeguarding this information as well as to understand the regulations and requirements to safeguard this information
-
Will never sell protected information for any reason
-
Will never disclose protected information outside of what is required to provide services to our clients and their members or otherwise required by law without written authorization.
-
Authorization for disclosure is required for:
-
Most uses and disclosures of psychotherapy notes (where appropriate)
-
Uses or disclosures for marketing purposes
-
Uses or disclosures that constitute a sale; as well as other uses and disclosures not described in this Privacy Statement and will be made only with authorization from the individual member.
It is the policy of MedZed that we treat PHI securely and confidentially. We limit access to PHI to only those persons who need to know that information to provide services to our clients and their members. These persons are trained on the importance of safeguarding this information and must comply with our procedures and applicable laws. We employ strict physical, electronic, and procedural security standards to protect PHI and maintain internal procedures to promote the integrity and accuracy of that information. MedZed will never sell PHI for marketing purposes nor share it with parties without written authorization from the client. A member who has received services from MedZed has the right to request a copy of their PHI by authorizing a release to themselves or directing MedZed to release PHI to a third party. A release and consent form can be obtained and sent in writing to MedZed at:
MedZed, LLC
1100 Spring St. NW, Suite 350
Atlanta, GA 30309
1(877) 633-9331
MedZed takes privacy and security incidents very seriously. If the privacy or security of protected health information (PHI) is compromised, MedZed has immediate policies and standard operating procedures to notify our clients of such an occurrence within 48 hours. All incidents, potential or real, will be fully investigated, contained, and mitigated and members notified according to written standards and legal requirements.
To contact MedZed’s Privacy Officer, please reach out at privacy.officer@mymedzed.com
To contact MedZed’s Security Officer, please reach out at security.officer@mymedzed.com