Keystone Health Center HIPAA Statement According to HIPAA regulation section §164.506(C)(1) a covered entity must "...inform the individual that protected health information may be used and disclosed to carry out treatment, payment or healthcare operations." Since Keystone Health Center (KHC) is a covered entity and must obtain informed consent as a normal course of treatment, no additional consent from patients for the purposes of operations or payment would be necessary. Every employee and affiliate of KHC will take all necessary steps to ensure that any Protected Health Information (PHI), which may be observed during the course of treatment or business is kept confidential. As a "business associate" bound by written contract to or by KHC, KHC or affiliates will ensure the use of patient data for purposes of performing treatment, operations, or obtaining payment as considered "healthcare operations" as defined in HIPAA regulation §164.501. |