Qualifacts iQ for Mobile allows health care providers to support care delivery and documentation through a secure mobile application, including offline recording capabilities when an internet connection is unavailable. This means personal information and personal health information may be collected, stored, and processed through Qualifacts iQ for Mobile. This information is highly sensitive and protected by the Health Insurance Portability and Accountability Act HIPAA and all equivalent personal health information protection legislation throughout the United States. Qualifacts iQ for Mobile is committed to safeguarding it at the corresponding level. This Policy describes the physical, technological, and administrative measures we implement to safeguard personal information and personal health information. We comply with privacy law and honor the trust of our users by taking every necessary measure to protect personal information and personal health information.
By law, personal information is information that relates to an identifiable individual, to the exclusion of business contact information such as name, title, work address, work phone number, or work email address. Personal health information includes information that relates to an identifiable individual’s physical or mental health, health history including family history, or medical treatment.
If we update this Privacy Policy, we will notify you.
Read on to learn more, and if you have questions, feel free to contact our Designated Privacy Contact, Chief Privacy and Security Officer, Nicholas Chepesiuk, at Nicholas.Chepesiuk@qualifacts.com
Our commitment
Qualifacts iQ for Mobile will never collect, use, or disclose personal information or personal health information without the consent of the individual it relates to, except where permitted or required by law.
Qualifacts iQ for Mobile safeguards personal information and personal health information on the basis of risk assessments and industry standards regarding physical security, technological security, and administrative policies and processes, as explained further below.
Qualifacts iQ for Mobile complies with all applicable personal health information legislation where it operates.
What we collect
From health care providers
We collect name, business contact information, specialization, and college registration number if applicable.
From patients
When a health care provider uses Qualifacts iQ for Mobile in connection with care delivery, documentation, or offline recording workflows, we may collect
- Patient name or initials and email address where applicable
• Date and time related to a visit, encounter, or documented activity
• Clinical notes, written instructions, or other documentation entered by the provider in the app
• Files, recordings, images, documents, or other materials attached, captured, or uploaded through the app
• Information collected through forms, assessments, questionnaires, or other in app workflows assigned and completed through the system
How we protect it
Qualifacts iQ for Mobile protects personal information and personal health information through integrated physical, technological, and administrative safeguards.
Physical safeguards
Qualifacts iQ for Mobile premises are divided into secure areas where electronic equipment and personal information and personal health information cannot be accessed without authorization.
Access is controlled and monitored in a manner that keeps all personal information and personal health information secure from unauthorized access.
All necessary backups are securely maintained.
Qualifacts iQ for Mobile does not keep personal information or personal health information on paper except where legally required or operationally necessary under controlled procedures.
Technological safeguards
Qualifacts iQ for Mobile stores personal information and personal health information using secure cloud infrastructure, including Amazon Web Services AWS in Northern Virginia.
Data stored, transmitted, uploaded, or synchronized through Qualifacts iQ for Mobile is protected using industry standard safeguards, including encryption and access controls designed to protect information at rest and in transit.
Where offline recording is enabled, recordings and related data created while the device is offline are protected through application and device level security controls and are synchronized securely when connectivity is restored.
Qualifacts iQ for Mobile destroys or anonymizes personal information and personal health information when it is no longer necessary to deliver service or where retention is no longer required by law, contract, or operational necessity.
Qualifacts iQ for Mobile employees can only gain technological access to personal information or personal health information collected by Qualifacts iQ for Mobile
- With a strong password based on required elements
• Upon authorization granted strictly on a need to know basis defined according to job requirements
Access is monitored through technological audit trails. Audit trails are regularly reviewed to ensure compliance.
Administrative measures
Qualifacts iQ for Mobile has appointed a Designated Privacy Contact, mentioned above, who acts as Chief Privacy and Security Officer CPSO responsible for information system monitoring and information security policy and procedure management.
The CPSO is responsible for compliance with the Qualifacts iQ for Mobile privacy program, including
- Undertaking threat and risk assessments on a regular basis and as systems are approved
• Adopting policies and procedures on the basis of threat and risk assessments to mitigate identified risks, updated as necessary
Qualifacts iQ for Mobile users may access their personal information by accessing their account and, should they require assistance, by contacting our CPSO.
Qualifacts iQ for Mobile closes accounts immediately upon request where applicable and destroys or anonymizes personal information in accordance with legal, regulatory, and contractual requirements.
Qualifacts iQ for Mobile completes background checks on all employees before starting employment. As soon as employment starts, Qualifacts iQ for Mobile trains, supports, and supervises all employees on its Privacy Policy and procedures.
Contractors are held to the same high level of protection of personal information and personal health information as Qualifacts iQ for Mobile through contractual agreements, including audits, based on Qualifacts iQ for Mobile Privacy Policy and procedures.
Qualifacts iQ for Mobile senior management receives regular reports on privacy compliance and, in turn, reports to the Board for oversight.
Qualifacts iQ for Mobile is regularly audited by a third party to ensure we are meeting our privacy obligations. This is part of an ongoing process to reassess policies and procedures and ensure that legal requirements are met and personal information and personal health information remain secure.
How we use it
Qualifacts iQ for Mobile will never use personal information or personal health information for purposes other than those for which it was provided with consent and as necessary to deliver service.
Qualifacts iQ for Mobile will never rent or sell the personal information or personal health information it collects.
Qualifacts iQ for Mobile will never disclose personal information or personal health information except as required by law and upon demonstrated lawful authority.
Should Qualifacts iQ for Mobile conduct market or product research, it would not use personal information or personal health information in identifiable form. Rather, it would anonymize information so that it is not reasonably traceable to an individual.
Should Qualifacts iQ for Mobile offer users the opportunity to receive relevant information on products, services, or promotions, Qualifacts iQ for Mobile will seek explicit consent to exercise that option.
Breach response
Experience tells us that there is no total guarantee against data breaches. Damage can be mitigated, however, and Qualifacts iQ for Mobile has taken reasonable measures to prevent a breach, as described above.
In the event of a breach, Qualifacts iQ for Mobile would immediately mitigate its impact by
- Notifying users at the first reasonable opportunity as soon as we identify the breach
• Applying remedial measures immediately
Ensuring meaningful consent
To ensure meaningful consent, Qualifacts iQ for Mobile provides relevant information in this Privacy Policy, as well as through the availability of our Designated Privacy Contact at nicholas@oncallhealth.us
To proceed with registration for Qualifacts iQ for Mobile, a user may be required to complete an applicable consent or acknowledgment form.
Qualifacts iQ for Mobile
User Consent and Acknowledgment
I agree to use of Qualifacts iQ for Mobile by my health care provider or authorized care team on the basis of the following information
Qualifacts iQ for Mobile may collect my name, relevant identifying information, health related information, documentation, recordings, files, and other information necessary to support care delivery, documentation, and related workflows
Qualifacts iQ for Mobile may allow information to be recorded offline and securely synchronized when connectivity becomes available
Qualifacts iQ for Mobile does not use my personal information or personal health information without my consent except as necessary to provide its service or as otherwise permitted or required by law
Qualifacts iQ for Mobile will never rent or sell my personal information or personal health information
Qualifacts iQ for Mobile will never disclose my personal information except as required by law and upon demonstrated lawful authority
Qualifacts iQ for Mobile will close my account where applicable upon request and destroy or anonymize personal information in accordance with applicable legal and operational requirements