Commitment to Privacy and Security
Shandy Creative Solutions is committed to maintaining the privacy, security, and integrity of sensitive healthcare information. Our processes and systems are designed to support healthcare organizations in maintaining compliance with the Health Insurance Portability and Accountability Act (HIPAA).
1. Role in Supporting Healthcare Organizations
Shandy provides marketing and brand execution services for healthcare organizations. While our primary role is not clinical, we recognize that certain workflows may involve access to or interaction with Protected Health Information (PHI).
When applicable, we operate in a manner consistent with HIPAA requirements and industry best practices.
2. Protection of Sensitive Information
We implement safeguards designed to protect sensitive data, including:
- Controlled access to systems and information
- Secure handling of data during transmission and storage
- Role-based access where appropriate
- Ongoing review of processes to reduce risk
3. Business Associate Agreements (BAA)
When required, Shandy will enter into a Business Associate Agreement (BAA) with covered entities.
This agreement defines responsibilities related to the handling, protection, and use of PHI in accordance with HIPAA regulations.
4. Data Handling Practices
Our approach to data handling includes:
- Limiting access to only necessary information
- Using secure platforms and processes
- Avoiding unnecessary storage or duplication of sensitive data
- Maintaining confidentiality across all interactions
5. Platform and Process Integrity
Shandy utilizes integrated systems and structured workflows designed to support secure operations.
All tools and processes used in delivering services are selected and managed with data protection and privacy in mind.
6. Employee Awareness and Responsibility
Team members involved in projects are expected to:
- Follow established data handling procedures
- Maintain confidentiality of all client information
- Adhere to security best practices
7. Ongoing Commitment
HIPAA compliance is an ongoing responsibility.
Shandy continuously evaluates and improves processes to align with evolving standards and best practices.
8. Contact
For questions regarding HIPAA compliance or data handling practices, please contact:
Shandy Creative Solutions
sales@shandycreative.com
770.951.0305