Published Policies
Each policy carries a version number and effective date on its cover page. Superseded versions are archived with their effective and retirement dates. A copy in any format is available on request at no charge.
The ethical, clinical and professional standards every person working for or on behalf of TeleHCN is held to — including HIPAA, licensure, fraud and abuse, conflicts of interest, and the duty to report concerns.
Read policyHow personal data is collected, used, disclosed, secured, retained and destroyed — including data minimisation, our United States-only requirement, individual rights, and how we monitor and enforce compliance.
Read policyWhat every person with data access is taught, when, and what happens if they don't complete it. Training is mandatory before access is granted and at least annually thereafter.
Read curriculumHow we detect, contain and report a suspected breach — including notification deadlines and how to raise a privacy concern or complaint. The full plan is available on request.
Read summaryFor patients. How medical information about you may be used and disclosed, the rights you hold over it, and how to exercise them or make a complaint.
Read noticeWhat We Commit To
All personal data is stored, processed and accessed exclusively within the United States. No clinician, contractor or supplier accesses patient data from outside the US, at any time, including while travelling.
Personal data is never sold, never shared for cross-context behavioural advertising, and never used to train artificial intelligence or machine learning models.
Clinicians access only the records relevant to the patients they are covering, in the facility's own system. The clinical record is never copied into a TeleHCN system.
Every employee and contracted clinician must report a suspected privacy or security incident within 24 hours. Good-faith reporting is protected from retaliation.
Every record type has a stated retention period and a legal basis. At the end of it, data is destroyed to NIST SP 800-88 standards with the destruction logged.
We do not purchase personal data from brokers, and we do not ingest third-party consumer data into our systems.
Available on Request
The following are provided to contracted personnel, and to customers and prospective customers, under an appropriate confidentiality agreement. They are not published because they document system architecture, detection controls and supplier detail.
Contact
Questions about these policies, requests to exercise a privacy right, and reports of a suspected incident all go to the officers below.
Privacy Officer & Compliance Officer
dr.raina@telehealthcarenetwork.com +1 (715) 321-4122Making a complaint. If you believe your privacy rights have been violated you may complain to us, and also to the treating facility, to your state attorney general, and to the U.S. Department of Health and Human Services Office for Civil Rights.
OCR: hhs.gov/ocr/privacy/hipaa/complaints · 1-877-696-6775
No one is penalised, denied care or treated differently for raising a concern in good faith.
We're glad to walk your compliance or security team through any of it.