HIPAA-Compliant EHR

We know that HIPAA (Health Insurance Portability and Accountability Act) compliance goes beyond safeguarding data. It's about protecting the people you serve.

Our HIPAA compliant EHR system helps you preserve the privacy and security of every patient by:

• Controlling Access: Only authorized people in designated roles have access to relevant patient medical records and health data (what HIPAA refers to as the “minimum necessary requirement”)
• Instituting Multiple Safeguards: Password protection, two-factor authentication, idle timeouts, automatic logouts, and secure server access add further layers of protection to patient data
• EHR Caretaking: Routine backups ensure that healthcare providers don't lose patient information due to technical glitches or user errors
• Compliant, Secure Messaging: Secure communication channels use advanced data encryption to protect sensitive data.

The HIPAA Privacy Rule requires that access to protected health information be limited to the minimum necessary. ClinicTracker’s EHR software supports role-based access controls and configurable user roles to help you limit access appropriately.

Some examples of how you can use ClinicTracker's security features are:

• Restrict a staff member who works in Location A from accessing patient records in Location B
• Allow an administrative assistant to enter demographic information, but only view progress notes
• Give permission for a compliance officer to view documentation, but not make changes
• Confine access to the records of staff who participate in an employee assistance program
• Preclude a particular clinician from viewing information about patients on someone else's caseload

The HIPAA Security Rule requires covered entities to maintain reasonable and appropriate administrative, technical, and physical safeguards for electronic protected health information. ClinicTracker helps you meet these requirements by allowing you to:

• Specify individual user system access and edit permissions
• Limit patient record access in a variety of ways
• Require a password at each log in
• Specify your password complexity, age, and history requirements
• Lock users out of the EHR after a number of incorrect password entries or after a number of days of inactivity
• Review audit logs to see a history of who has viewed, saved, exported, printed, or deleted a patient record

The loss of patient information is simply unacceptable. We protect your healthcare organization's information by running daily maintenance routines and creating continuous backups. If you access ClinicTracker from our Hosting Service, we completely manage backup retention and offsite storage for you. If your software is installed locally, you are only responsible for ensuring that the nightly backups are securely stored to an off-site location.