|
|
| Home |
|
>> LOGIN |
Forgot Password |
Register |
HIPAA |
About Us |
Services |
Benefits |
PayerLists / Forms |
FAQ |
Contact |
Privacy |
Help |
|
 |
|
|
|
HIPAA Compliance Readiness Statement
The Health Insurance Portability and Accountability Act of 1996 Public Law 104-191 ("HIPAA") was passed by Congress with the intend to reform the insurance market and simplify health care administrative. Specifically the HIPAA Administrative Simplification is aimed at reducing the costs and administrative burdens of health care by adopting and requiring the use of standardized, electronic transmission of administrative and financial transactions. The Administrative Simplification also imposes requirement for the protection of private health information. As a covered entity, as defined by HIPAA sections 160.102 and 160.103, Office Ally is dedicated to attain HIPAA compliance by the deadlines as provided by the regulation. Furthermore, as a clearinghouse, Office Ally welcomes the opportunity to play a strategic role in the implementation of HIPAA and to assist providers of all sizes and all levels of technology in their efforts to reach and sustain HIPAA compliance. Top Definitions Covered Entity 45CFR160.103 Covered entity means one of the following:
45CFR160.103 Health care clearinghouse means a public or private entity that does either of the following (Entities, including but not limited to, billing services, repricing companies, community health management information systems or community health information systems, and "value-added" networks and switches are health care clearinghouses for purposes of this subchapter if they perform these functions.):
Compliance deadlines for the Administrative Simplification
Top Office Ally HIPAA Compliance Program Office Ally has developed a comprehensive HIPAA Compliance Program in order to ensure compliance by the deadlines. This program addresses the Privacy rule as well as the Security Rule (i.e., Administrative, Physical Safeguards, Technical Security Measures and Technical Security Mechanisms). The program is presented below in its various stages of completion:
Top Security and PHI Protected Health Information (PHI) 45CFR164.501 Protected health information means individually identifiable health information:
Data is kept secure and private. We secure data files by encrypting and storing them on our servers. By encrypting files, we have significantly reduced the risk of unwanted eyes peering though data. Only our proprietary components have the ability decipher the encrypted data. This encryption also provides data integrity, which prevents any malicious attempt to manipulate the data that we have received from the submitter. As an added measure for non-repudiation, we track and log all user and employee transaction via (SIDs) Security Identifiers. Each user and employee is issued a SID, which uniquely identifies him or her in our system. It is the policy of the Office Ally to encrypt the transmission of all personal or financial Web-based information that is transmitted between our site and your browser. The security standard SSL (Secure Sockets Layer) is used to implement this. SSL is the leading standard for securing World Wide Web transmissions. The Office Ally website is certified by DigiCert Inc. Users can verify the validity of the certification on the website: (img)
Top Transactions ANSI (American National Standards Institute) is an organization that accredits various standards-setting committees (i.e. ICD-9 and HCPCS). ANSI has accredited a group called X12 that defines EDI standards for many American industries, including health care insurance. Most of the electronic transaction standards mandated or proposed under HIPAA are X12 standards. Office Ally has successfully tested with a third party vendor and is able to send and receive the following HIPAA compliant transactions:
Top Disaster Recovery Plan The Office Ally site is hosted at Net-fire INC. - the second largest server farm in the country. Their state-of-the art backup and recovery procedures allow them to boast a 99.992 % uptime. In addition to the Net-fire backup and recovery procedures, Office Ally has its own backup and recovery procedures, tested the last weekend of every month. When a provider file is uploaded to the Office Ally website, a copy of the encrypted file is immediately moved it to a backup server. Nightly, backup copies of the database are made. We estimate that we could retrieve these copies and be operational within 2 hours if needed. The data that would have been processed after the last backup can be reprocessed and applied to the database within 30 minutes. Top Disclaimer and Contact The above information does not constitute any warranties of any kind and is provided for informational purposes only. In the event that you need further information, please do not hesitate to contact Office Ally's HIPAA Compliance Officer: Gloria Chung Manager HIPAA Compliance Officer (866) 575-4120 Fax: (360) 896-2151 Gloria.Chung@OfficeAlly.com Office Ally 16703 SE McGillivray Blvd. Suite 200 Vancouver, WA 98683 www.officeally.com support@OfficeAlly.com Top |
|
Patient/Provider Eligibility - Screening - EDI
© 2008 OfficeAlly.com
sII