HIPAA Notice
Protected health information needs protected systems.
This notice is a launch placeholder and should be replaced with the clinic's final Notice of Privacy Practices before accepting patients online.
Sierra Ridge Health should maintain a Notice of Privacy Practices explaining how protected health information may be used and disclosed, how patients can exercise privacy rights, and how privacy concerns can be reported. Online intake, patient messaging, and portal workflows should be configured through compliant vendors before collecting clinical information.
Use secure intake channels
Avoid PHI in regular email
Review vendor BAAs where required
Publish final notice before launch