HIPAA mandates that the transmission of personal health information(PHI) is standardized and handled in a way that assures privacy and security. HMA has designated a HIPAA Privacy Officer, responsible for the organization’s compliance with HIPAA.
HMA complies with all applicable Privacy and Security Rule requirements. HMA meets all the detailed requirements within these rules, many of which have been updated with the Omnibus Rule.
HMA’s business associates are also required to execute Agreements with any Associates given access to their health plans’ PHI. Any vendors or businesses farther down this “chain of custody” are also considered Business Associates and, therefore, are obligated to comply with HIPAA regulations. HMA continues to implement a strong Business Associate subcontractor management program of our own.