HIPAA & Security Commitment

Ding A Ling Answering Service providestelephone answering and communication support for healthcare providers andother organizations. We understand that dependable service must be paired with disciplined privacy and security practices.

Our Role

When Ding A Ling performs services for a HIPAA-covered healthcare client and creates, receives, maintains, or transmits Protected Health Information on that client’s behalf, Ding A Ling may act as the client’s business associate. We enter into Business Associate Agreements when required and use or disclose PHI only as permitted by the applicable agreement, client instructions, and law.

Administrative, Physical, and Technical Safeguards

Our HIPAA and security program includes safeguards designed to protect the confidentiality, integrity, and availability of PHI and other sensitive information. Depending on the system and service involved, safeguards may include:

·       Documented privacy and securitypolicies and assigned responsibility;

·       Workforce privacy and securitytraining;

·       Role-based access and minimum-necessary practices;

·       Unique user credentials,password controls, and multi-factor authentication where supported and appropriate;

·       Workstation, remote-work,facility, and device safeguards;

·       Transmission security andsecure communication procedures;

·       Audit logging, activity review,and incident-response processes;

·       Data backup, contingency planning, and disaster-recovery procedures;

·       Vendor and business-associate oversight; and

·       Periodic risk assessments,policy reviews, and evidence-based compliance activities.

Workforce Responsibilities

Workforce members are expected to protect confidential information, follow approved procedures, use only authorized systems and accounts, promptly report suspected incidents, and complete required privacy and security training. Access is based on job responsibilities and is removed or adjusted when duties or employment change.

Incident Response

Ding A Ling maintains procedures foriden tifying, reporting, investigating, documenting, and responding to suspected privacy or security incidents. When an incident involves client information, we coordinate with the affected client and follow applicable contractual and legal notification obligations.

Ongoing Risk Management

Security is an ongoing process. We review risks, safeguards, policies, training, vendor relationships, and continuity procedures as our operations and technology change. We work to address identified risks in a reasonable and appropriate manner based on their likelihood, potential impact, and the nature of our services.

Public Website and PHI

Our public website is intended for general business information and inquiries. It is not an approved channel for patient communications or PHI. Visitors should not submit patient information, medicaldetails, or other sensitive information through the public contact form.Existing clients should use their established secure channels.

Questions and Due Diligence

Healthcare organizations evaluating Ding ALing may contact us regarding Business Associate Agreements, security questionnaires, and reasonable compliance due-diligence requests. Informationis provided subject to confidentiality, security, contractual, and operational considerations.

Privacy and Security Contact
Ding A Ling Answering Service
800-544-4775

‍customerservice@dingalinganswers.com

‍