About Us
- > hipaa


HIPAA isn't just the law, it's also a way to protect your patient's data and as such mdconsult.net strictly adheres to the relative portions of HIPAA. Our services can be an effective portion of your practice operating in a HIPAA compliant manner.


Background
The Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (HIPAA) has had a significant impact on the health care industry. HIPAA applies to “covered entities” and, indirectly, to their “business associates.” As a health care image storage service, mdconsult.net acts as a business associate on behalf of its customers. mdconsult.net has spent a considerable amount of time and resources to develop programs and systems to ensure compliance with the key HIPAA standards and requirements.

Standards for Electronic Transactions
Standards adopted under HIPAA require covered entities to transmit and receive certain electronic transactions in standard formats (the Transactions Rule). As a business entity, involved in storage of information the transaction rule does not generally apply to the services we provide.

Privacy Rule
Privacy standards adopted under HIPAA (the Privacy Rule) require that covered entities use or disclose Protected Health Information (PHI) only as permitted or required by the Privacy Rule. mdconsult.net has implemented policies and procedures designed to ensure compliance with the Privacy Rule requirements by mdconsult.net's workforce.

Security Rule
Security standards adopted under HIPAA (the Security Rule) require that covered entities implement appropriate physical, administrative, and technical measures to ensure the confidentiality, integrity and availability of PHI in electronic form (ePHI).
mdconsult.net has performed a risk analysis under the Security Rule, and has prepared a risk management plan in which it has identified the measures in place to ensure that it maintains the confidentiality, integrity, and availability of ePHI.