HIPAA Compliance

What is HIPAA?

The Health Insurance Portability and Accountability Act (HIPAA) is a federal law enacted in 1996 that establishes national standards for the protection of sensitive patient health information. HIPAA requires healthcare providers, health plans, and their business associates to implement safeguards to protect the privacy and security of protected health information (PHI).

As a CHAP-accredited durable medical equipment provider, Coranova Medical Supply LLC is fully committed to complying with all HIPAA regulations, including the Privacy Rule, Security Rule, and Breach Notification Rule.

Your Rights Under HIPAA

HIPAA provides you with important rights regarding your protected health information:

• Right to Access: You have the right to see and obtain a copy of your health information that we maintain.
• Right to Amend: You have the right to request corrections to your health information if you believe it is inaccurate or incomplete.
• Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your health information.
• Right to Request Restrictions: You have the right to request restrictions on how we use or disclose your health information for treatment, payment, or healthcare operations.
• Right to Confidential Communications: You have the right to request that we communicate with you about your health information in a specific way or at a specific location.
• Right to a Copy of This Notice: You have the right to obtain a paper copy of this notice upon request.

How We Use and Disclose Your Health Information

We may use and disclose your protected health information for the following purposes:

• Treatment: To provide, coordinate, or manage your durable medical equipment and related services, including coordinating with your healthcare providers.
• Payment: To bill and collect payment for the equipment and services we provide, including submitting claims to Medicare on your behalf.
• Healthcare Operations: For our internal operations, including quality assessment, staff training, compliance activities, and business planning.
• As Required by Law: When required by federal, state, or local law, including public health activities, health oversight, and judicial proceedings.

We will not use or disclose your health information for any purpose not described in this notice without your written authorization. You may revoke any authorization you give us at any time by notifying us in writing.

Breach Notification

We maintain incident response procedures to promptly identify, contain, and remediate any potential breaches. Our team is trained to recognize and report potential security incidents immediately.

Business Associates

We may share your health information with third-party service providers ("Business Associates") who perform functions on our behalf that involve access to PHI. All Business Associates are required to sign Business Associate Agreements (BAAs) that obligate them to protect your health information in accordance with HIPAA requirements.

Filing a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.