HIPAA Driven Process Implementation

The Do - Check - Act portion of the PDCA cycle forms the crux of the activities that are done on a daily basis. The process designed by CAPRN emphasizes instant data / information sharing and strong collaboration of multiple people involved in the cycle. Collaboration is achieved by deploying an easy to use web-based software that can be accessed from anywhere - anytime by the front-office, back-office, billing coordinator and CAPRN coordinator.

Closer View

The following HIPAA requirements are implemented in handling sensitive patient information:

All the Systems and other related infrastructure are physically secured to prevent unauthorized access to the hardware.
We maintain logs of movement in to and out of the secured area.
Entire intranet is behind a firewall and each and every access to external networks is closely monitored and controlled by the firewall and Proxy servers. Proxy servers are configured with the access rules to prevent unwarranted internet usage. All network activities are logged by the Proxy servers.
All Email communications are scanned automatically for virus / spam etc. Further every email is subjected to rule-based filters (such as attachment size, type of attachments etc)
All file transfers use VPN only, which has 128 bit encryption enforced.
Access to various peripheral devices like CDROMS, Floppy drives, USB Drives is controlled.
Access to printer is controlled and all print outs are shredded after the retention period.