When your practice texts or emails your patients clinical information (e.g. xrays, treatment plans, etc.) directly or using automated software, is it encrypted?
Yes
No
I don't know
Do you conduct a HIPAA security risk assessment on an annual basis?
Yes
No
I Don't Know
Are you currently backing up all of your clinical information offsite?
Yes
No
I Don't Know
If patients can access patient information via a patient portal on your practice website, do you have an https-certified website?
Yes
No
I Don't Know
If you use electronic medical records, are they password-protected with unique user IDs/logins for each employee?
Yes
No
I Don't Know
If you still use paper records, are they locked away and hidden from view of all other patients?
Yes
No
I Don't Know
Does your practice have a designated HIPAA privacy/security officer?
Yes
No
I Don't Know
Does every employee have an initial HIPAA training and participate annually in HIPAA continuing education?
Yes
No
I Don't Know
