HIPAA COMPLIANCE NOTICE – DETAILED
This system contains confidential, proprietary, and sensitive information, including Protected Health Information (PHI) governed by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), and applicable Pennsylvania state laws and regulations.
UNAUTHORIZED ACCESS IS STRICTLY PROHIBITED
All data elements described as protected health information (PHI) include, but not limited to:
- Addresses
- Telephone numbers
- Fax numbers
- Electronic Mail addresses
- Social security numbers
- Medical record numbers
- Birth date
- Date of death
- Health plan beneficiary numbers
- Account numbers
- Certificate/license numbers
- Vehicle identifiers and serial number, including license plate numbers
- Device identifiers and serial numbers
- Full face photographic images and any comparable images
- Client information (such as, disability insurance claimants, recipients of public social services, participants of state/federal programs, employers, etc.)
- Information about how automated systems are accessed and operate
- Any other proprietary information.
- Any other unique identifying number characteristic, or code
By accessing this system, you acknowledge and agree to the following:
Authorized Access Only:
Access to this Electronic Health Record (EHR) system is restricted to authorized users only. You are accessing this system as an employee, contractor, or affiliate of Jewish Family and Children’s Service of Greater Philadelphia, a HIPAA-covered nonprofit social service provider. Unauthorized access or use of this system is strictly prohibited and may result in disciplinary action, civil and/or criminal penalties.
Confidentiality of Protected Health Information (PHI):
You are responsible for protecting the confidentiality, integrity, and security of all PHI and sensitive data accessed through this system. Disclosure of PHI is only permitted as authorized under HIPAA, agency policies, and Pennsylvania law. You must not access, review, share, or disclose any client information unless you are specifically authorized to do so and it is necessary for your assigned responsibilities.
User Accountability:
You are responsible for all activities performed under your login credentials. Your access to this system is monitored and audited. You must not share your username or password. You must log out after each session and take all necessary precautions to prevent unauthorized access.
Electronic Signature Acknowledgment:
By entering information into the system and clicking the “Submit,” “Save,” “Sign,” or any equivalent action button on any form, assessment, treatment note, or other clinical documentation, you certify that:
- The information entered is true, accurate, and complete to the best of your knowledge.
- You understand and agree that clicking these buttons is the legal equivalent of your handwritten signature.
- Your electronic signature will be recorded with a timestamp and user ID, and will be permanently affixed to the corresponding entry in the health record.
- You may be held accountable for any inaccurate or fraudulent entries.
Use Monitoring and Audit Rights:
All system access and usage are subject to monitoring, logging, and periodic audit by authorized personnel. Use of this system constitutes your consent to such monitoring and auditing activities. Any suspected misuse, unauthorized access, or breach must be reported immediately to the Privacy Officer or designated compliance authority.
Compliance Obligation:
Your use of this system affirms your agreement to comply with all applicable federal and state laws, agency policies and procedures, and ethical standards related to the privacy and security of health information.
If you do not agree with any of the terms above, do not log into the system.
For questions or to report a suspected violation, contact Debora Borenstein, HIPAA Compliance Officer.