HIPAA Compliance Policy

 At Mercy Care Services, we are committed to safeguarding the privacy and security of our clients' protected health information (PHI). As an in-home health care provider offering non-medical care services, we recognize the importance of maintaining the  confidentiality and complying with the Health Insurance Portability and Accountability Act of 1996 (HIPAA). 

Our Commitment 

 Mercy Care Services adheres to all applicable HIPAA regulations to ensure the confidentiality, integrity, and availability of PHI. We implement policies and procedures designed to protect sensitive information against unauthorized access, use, or disclosure. 

Scope 

 This policy applies to all employees, contractors, volunteers, and affiliates who have access to PHI in the course of providing in-home non-medical care services. 

Types of Protected Health Information (PHI) 

 PHI may include, but is not limited to:
- Client names, addresses, and contact information
- Personal identifiers
- Medical history and health status (when applicable)
- Care plans and service records
- Billing and payment information
 

 Privacy Practices 

 - Confidentiality: All PHI is considered confidential and is only accessed by authorized personnel for legitimate purposes related to client care.
- Minimum Necessary Standard: We limit access to PHI to the minimum necessary to perform job functions.
- Client Rights: Clients have the right to access their PHI, request amendments, and obtain a copy of our privacy practices. 

 Security Measures
- Physical Safeguards: Secure storage of documents and electronic devices.
- Technical Safeguards: Use of secure passwords, encryption, and secure electronic systems to protect digital PHI.
- Administrative Safeguards: Regular training of staff on HIPAA policies, breach response procedures, and confidentiality agreements. 

 Breach Notification
In the event of a breach involving PHI, Mercy Care Services will follow HIPAA breach notification requirements, including notifying affected individuals and relevant authorities as required by law. 

 Employee Training
All staff members undergo HIPAA training upon hiring and periodically thereafter to ensure ongoing awareness and compliance. 

 Contact Information
For questions or concerns about our HIPAA practices or to report a breach, please contact us at info@mercycareservice.org