top of page

Protecting the Privacy of Patients' Health Information


    The privacy of all medical records and other individually identifiable health information must be protected at all times. Information relating to a patient’s health care history, diagnosis, condition, treatment, or evaluation shall be considered individually identifiable health information. Confidentiality of this health information must be maintained at all times, and may only be disclosed with the express written consent of the patient.


    Non-individually identifiable health information, (e.g. health information that cannot be linked to a specific patient) is not included within the definition of protected health information



    An individual’s health information can be used for health purposes only.


    Protect individually identifiable health information. Chronicle Inc., shall not publish or otherwise make generally available any information or data that identifies a patient for purposes other than treatment, payment or other health care operations, without his or her express written consent. This does not restrict the internal use of such information or data that is required in the performance of the scope of work that Chronicle Inc., has been engaged to perform for a client. 


    Ensure that health information is not used for non-health purposes. Patient information can be used or disclosed only for purposes of the performance of the scope of work that  Chronicle Inc., has been engaged to perform for a client. Health information cannot be used for purposes not related to scope of work without explicit authorization from the patient.

    Maintain health information in a manner to protect confidentiality. All individually identifiable health information shall be maintained by Chronicle Inc., in a confidential manner that prevents unauthorized use and disclosure to third parties. For example, Chronicle Inc., may share confidential information with a third party under contract or affiliated with Chronicle Inc., for the same purpose of performing the services for which we were engaged, provided that the information shall remain confidential at all times and shall be shared with only those persons that have authority to receive such information.

bottom of page