|
|
|
 |
SureScripts-RxHub, LLC ("SureScripts-RxHub") understands the importance of respecting the privacy and confidentiality of personal information. SureScripts-RxHub gives healthcare providers secure, electronic access to prescription information that can save their patients’ lives and reduce the cost of healthcare for all. Available during emergencies or routine care, SureScripts-RxHub’s network is used by physicians, physician assistants and nurse practitioners nationwide to exchange health information and prescribe without paper. SureScripts-RxHub handles personal health information in connection with activities undertaken to fulfill this mission. This privacy policy ("Privacy Policy") describes how SureScripts-RxHub handles personal health information and other types of personal information.
HOW SURESCRIPTS-RXHUB HANDLES PERSONAL HEALTH INFORMATION
SureScripts-RxHub operates the Pharmacy Health Information Exchange™ and the Patient Health Information Network™. The purpose of a health information exchange (also known as an "HIE") is to allow for the secure and reliable movement of electronic clinical health information between different health information systems while maintaining the meaning of the information being exchanged. Through the Pharmacy Health Information Exchange™ and the Patient Health Information Network™, physicians and pharmacies can gain access to prescription information and related information for use in providing clinical care to patients. This Privacy Policy explains how SureScripts-RxHub handles personal health information maintained, transmitted and otherwise made available by SureScripts-RxHub via the Pharmacy Health Information Exchange™ and the Patient Health Information Network™.
How the Pharmacy Health Information Exchange™ and the Patient Health Information Network™ are used. SureScripts-RxHub provides various services to physicians and pharmacists who connect to the Pharmacy Health Information Exchange™ and/or the Patient Health Information Network™. Core services include E-Prescribing and E-Refills, Rx History, and Eligibility and Formulary services:
- E-Prescribing and E-Refills services. The E-Prescribing service allows pharmacies and physicians to exchange prescription information electronically, for both new prescriptions and refills. The E-Refills service allows for the exchange of prescription information for refills only. Physicians desiring paperless prescribing may opt for the full E-Prescribing service, while those preferring to write new prescriptions by hand but transmit and respond to refill requests electronically may opt for the E-Refill service. SureScripts-RxHub makes this service available by providing a secure and reliable connection between physician computers and pharmacy computers.
- Rx History service. The Rx History service, available in select markets, allows physicians and pharmacists to use the Pharmacy Health Information Exchange™ and the Patient Health Information Network™ to access a patient's medication history across providers, at the point of care. This service can be used in the course of providing routine care, as well as during emergencies (like natural disasters) to enable health care providers to assist displaced individuals in getting access to needed prescription medications. To provide this service, SureScripts-RxHub securely connects to and aggregates a patient's medication history data stored in the databases of community pharmacies and pharmacy benefit managers. SureScripts-RxHub then presents that data to physicians through software from a certified vendor.
- Eligibility and Formulary services. Eligibility and Formulary services, available in select markets, allow physicians to gain ready access to formularies and other benefits information so they may make more informed clinical decisions. To provide this service, SureScripts-RxHub works with pharmacy benefit managers and payors (like HMOs and other insurers) to offer physicians access to their patients’ drug benefit coverage information in real time during office visits.
How the Pharmacy Health Information Exchange™ and the Patient Health Information Network™ are not used. SureScripts-RxHub does not mine personal health information available via the Pharmacy Health Information Exchange™ or the Patient Health Information Network™, either for SureScripts-RxHub’ own purposes or for the purposes of third parties. SureScripts-RxHub does not rent or sell personal health information available via the Pharmacy Health Information Exchange™ or the Patient Health Information Network™. SureScripts-RxHub also has taken steps to prevent third parties from using the system to influence physician prescribing decisions inappropriately. Similarly, SureScripts-RxHub has implemented procedures designed to help ensure that patient pharmacy choices are respected. Physicians connecting to the Pharmacy Health Information Exchange™ and Patient Health Information Network™ will not receive commercial messaging (like advertisements from pharmaceutical companies or other third parties) at the point of care. All prescribing applications certified to connect to the Pharmacy Health Information Exchange™ and Patient Health Information Network™ are required to abide by these rules, and only technology companies that agree with this philosophy are allowed to connect.
Storage of information transmitted via the Pharmacy Health Information Exchange™ and the Patient Health Information Network™. Consistent with industry norms, SureScripts-RxHub retains a record of personal health information transmitted via the Pharmacy Health Information Exchange™ and the Patient Health Information Network™ for a period of seven years.
How SureScripts-RxHub safeguards personal health information. Maintaining the privacy and security of personal health information maintained, transmitted or otherwise made available via the Pharmacy Health Information Exchange™ and the Patient Health Information Network™ is vitally important to us. SureScripts-RxHub has implemented appropriate privacy safeguards to prevent unlawful use or disclosure of personal health information. SureScripts-RxHub has implemented administrative, physical and technical security safeguards that reasonably and appropriately protect the confidentiality, integrity and availability of the electronic personal health information that it receives, maintains, transmits or creates. Examples of these safeguards include:
- Vendor certification process. Physicians and pharmacies may only connect to the Pharmacy Health Information Exchange™ and/or the Patient Health Information Network™ if they use software or systems that have been certified by SureScripts-RxHub. SureScripts-RxHub works with technology vendors to certify their products for connection to the Pharmacy Health Information Exchange™. This process ensures that vendors are able to send and receive supported electronic messages, and that the solution is providing open choice for medication selection and dispensing location. This process also ensures that the technology systems work in accordance with industry-accepted standards for the electronic exchange of prescription data between physicians and pharmacies. Once a vendor completes the process, it is added to the list of certified vendors that the SureScripts and RxHub divisions of SureScripts-RxHub each maintain and make available to physicians and pharmacies.
- Use of appropriate technologies. SureScripts-RxHub and its certified vendors use dedicated leased line and SSL VPN (Secure Sockets Layer Virtual Private Network).
- Audits. Recurring security audits of the system are performed by independent auditing entities.
EHNAC Accreditation. SureScripts-RxHub is accredited by the Electronic Healthcare Network Accreditation Commission ("EHNAC"), which is a nationally recognized nonprofit accrediting agency that provides independent peer evaluation of an organization’s ability to perform at industry-established levels within the healthcare electronic network industry.
ENFORCEMENT OF THIS PRIVACY POLICY
If you have any questions, comments or concerns about this Privacy Policy, SureScripts-RxHub’s handling of either personal health information, please contact us at:
Chief Privacy Officer
SureScripts-RxHub, LLC
5971 Kingstowne Village Parkway, Suite 200
Alexandria, VA 22315
703-921-2121
privacyofficer@SureScriptsRxHub.com
EFFECTIVE DATE
This Privacy Policy was last updated on June 15, 2008, and is effective as of that date. The main purpose of the June 15, 2008, update to this Privacy Policy was to incorporate information explaining how SureScripts-RxHub handles personal health information. Prior versions of this Privacy Policy are available upon request.
|
|
|
|