HIPAA & Security Commitment

Ding A Ling Answering Service providestelephone answering and communication support for healthcare providers andother organizations. We understand that dependable service must be paired withdisciplined privacy and security practices.

Our Role

When Ding A Ling performs services for aHIPAA-covered healthcare client and creates, receives, maintains, or transmitsProtected Health Information on that client’s behalf, Ding A Ling may act asthe client’s business associate. We enter into Business Associate Agreementswhen required and use or disclose PHI only as permitted by the applicableagreement, client instructions, and law.

Administrative, Physical, and Technical Safeguards

Our HIPAA and security program includessafeguards designed to protect the confidentiality, integrity, and availabilityof PHI and other sensitive information. Depending on the system and serviceinvolved, safeguards may include:

·       Documented privacy and securitypolicies and assigned responsibility;

·       Workforce privacy and securitytraining;

·       Role-based access andminimum-necessary practices;

·       Unique user credentials,password controls, and multi-factor authentication where supported andappropriate;

·       Workstation, remote-work,facility, and device safeguards;

·       Transmission security andsecure communication procedures;

·       Audit logging, activity review,and incident-response processes;

·       Data backup, contingencyplanning, and disaster-recovery procedures;

·       Vendor and business-associateoversight; and

·       Periodic risk assessments,policy reviews, and evidence-based compliance activities.

Workforce Responsibilities

Workforce members are expected to protectconfidential information, follow approved procedures, use only authorizedsystems and accounts, promptly report suspected incidents, and completerequired privacy and security training. Access is based on job responsibilitiesand is removed or adjusted when duties or employment change.

Incident Response

Ding A Ling maintains procedures foridentifying, reporting, investigating, documenting, and responding to suspectedprivacy or security incidents. When an incident involves client information, wecoordinate with the affected client and follow applicable contractual and legalnotification obligations.

Ongoing Risk Management

Security is an ongoing process. We reviewrisks, safeguards, policies, training, vendor relationships, and continuityprocedures as our operations and technology change. We work to addressidentified risks in a reasonable and appropriate manner based on theirlikelihood, potential impact, and the nature of our services.

Public Website and PHI

Our public website is intended for generalbusiness information and inquiries. It is not an approved channel for patientcommunications or PHI. Visitors should not submit patient information, medicaldetails, or other sensitive information through the public contact form.Existing clients should use their established secure channels.

Questions and Due Diligence

Healthcare organizations evaluating Ding ALing may contact us regarding Business Associate Agreements, securityquestionnaires, and reasonable compliance due-diligence requests. Informationis provided subject to confidentiality, security, contractual, and operationalconsiderations.

Privacy and Security Contact
Ding A Ling Answering Service
800-544-4775customerservice@dingalinganswers.com

‍