HIPAA Compliance Statement

At Smile Story, we are committed to maintaining the privacy and security of our patients' health information in accordance with the Health Insurance Portability and Accountability Act (HIPAA). This statement outlines how we protect your personal health information (PHI) and ensure compliance with HIPAA regulations.

What is HIPAA?

HIPAA is a federal law enacted to protect sensitive patient information from being disclosed without the patient’s consent or knowledge. It sets national standards for the protection of PHI, which includes any information related to a patient's health, medical history, treatment, or payment for healthcare services.

How We Protect Your Health Information

At Smile Story, we take the following steps to ensure the privacy and security of your PHI:

1. Access Control: Only authorized personnel with a legitimate need to know are allowed to access your health information.
2. Secure Storage: We store all health records in secure systems, both electronic and physical, that comply with HIPAA security standards.
3. Confidentiality: We ensure that all patient conversations, consultations, and records are kept confidential and private.
4. Training: Our staff members are trained on HIPAA regulations and privacy practices to ensure compliance in handling PHI.
5. Data Encryption: Any electronic transmission of PHI, such as email or data transfer, is encrypted to protect the confidentiality and integrity of your information.
6. Breach Notification: In the unlikely event of a data breach, we will notify affected patients promptly in compliance with HIPAA guidelines.

Use and Disclosure of Health Information

Your health information may be used and disclosed for purposes of treatment, payment, and healthcare operations. In certain circumstances, we may share your PHI without your explicit consent, such as:

• To coordinate or manage your healthcare and related services.
• To bill and collect payment for services provided.
• To comply with legal requirements (e.g., responding to court orders or subpoenas).

We will not disclose your PHI for purposes other than those allowed by HIPAA unless we have your written authorization.

Your Rights Under HIPAA

You have the following rights regarding your PHI:

• Right to Access: You have the right to access and request copies of your health records.
• Right to Request Amendment: If you believe that your health information is incorrect or incomplete, you may request that we amend your records.
• Right to Request Restrictions: You may request restrictions on how we use or disclose your health information.
• Right to Confidential Communications: You may request that we communicate with you through specific channels or at specific locations to maintain confidentiality.
• Right to an Accounting of Disclosures: You can request a list of certain disclosures we have made of your PHI.

Contact Information

If you have any questions about this HIPAA Compliance Statement or would like to exercise your rights, please contact us at:

Smile Story
1700 Post Oak Blvd, Ste 1-270
Houston, TX 77056
(713) 396-0091
concierge@smilestorydentistry.com

Smile Story is dedicated to safeguarding your personal health information and ensuring that we comply with all HIPAA regulations to protect your privacy. Thank you for trusting us with your dental care.