HIPPA Compliance Statement

HIPPA Compliance Statement
Norav Medical Inc. does not anticipate receiving or disclosing any individually identifiable information in the normal course of providing products/services. Should Protected Health Information (PHI) be made available, or obtained by Norav Medical, we do hereby assure our customers that we will:
-
Comply with the rules and regulations concerning the privacy and security of PHI under the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
-
Protect against any non-permitted use or disclosure of PHI using no less than a reasonable amount of care.
-
All policies and procedures related to information and physical security are frequently reviewed to ensure they are up to date and follow any new or revised regulation.
-
Report any non-compliance of which we become aware.
-
Have named a HIPAA Security Official who creates, maintains, and trains regarding our HIPAA policies and procedures.
-
Have established that all employees with access to PHI receive training on our policies and procedures according to HIPAA mandates.
-
Automatic expiration of passwords.
-
Account lockouts upon numerous failed log-in attempts.
-
Transcripts and exhibits sent and received through secure file transfer (Citrix’s ShareFile).
-
Data-at-rest encryption.
-
Email verification.
-
Automatic virus scans.
-
Secure data backups.
-
Any potential or actual breaches are logged, investigated, and reported.