HIPAA Compliance and Health Information Privacy

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a United States federal law that establishes national standards for the protection of sensitive patient health information.

HIPAA requires healthcare providers and organizations that handle medical data to implement safeguards that protect Protected Health Information (PHI) from unauthorized access, disclosure, or misuse.

HIPAA regulations primarily focus on:

• Protecting the confidentiality of patient health information
• Ensuring the security of electronic health records and communications
• Giving patients rights regarding access to and control over their medical data

Organizations that handle health information must comply with HIPAA privacy and security rules to ensure patient data is handled responsibly and securely.

My MMJ Doctor implements administrative, technical, and physical safeguards designed to support HIPAA privacy and security standards.

Our privacy and security practices are intended to ensure that patient health information is:

• Collected only when necessary to provide medical services
• Stored using secure systems and access controls
• Protected against unauthorized disclosure or misuse
• Accessed only by authorized healthcare professionals and necessary personnel

We continuously review our privacy policies, security systems, and operational procedures to help maintain compliance with healthcare privacy regulations.

Protected Health Information (PHI) refers to identifiable information related to a person's health condition, medical treatment, or healthcare services.

Examples of PHI may include:

• Medical history or health conditions
• Physician consultation records
• Telehealth consultation information
• Medical marijuana evaluation details
• Personal identifiers connected to healthcare records

Under HIPAA, this information must be protected using appropriate privacy and security safeguards.

Administrative Safeguards

Administrative safeguards include policies and procedures that limit access to health information to authorized individuals who require it to perform their duties.

Technical Safeguards

Technical safeguards include secure systems for storing and transmitting sensitive data. These systems help protect patient information through encrypted communications, access controls, and secure technologies.

Physical Safeguards

Physical safeguards protect the infrastructure used to store health information, including servers, networks, and systems that support telehealth services.

Together, these safeguards help maintain the confidentiality and integrity of patient information.

My MMJ Doctor provides telehealth services that allow patients to consult with licensed physicians remotely for medical marijuana evaluations.

Telehealth consultations may involve:

• Secure video consultations
• Protected electronic messaging
• Secure transmission of medical documentation

These technologies are designed to help protect patient privacy and maintain confidentiality during remote medical evaluations.

Patient health information may be used or disclosed only as permitted under applicable healthcare privacy laws.

This may include uses such as:

• Facilitating medical evaluations conducted by licensed physicians
• Supporting telehealth consultations
• Maintaining necessary administrative and medical records
• Complying with legal or regulatory obligations when required by law

My MMJ Doctor does not sell patient medical information.

Patients may have certain rights regarding their protected health information, including the ability to:

• Request access to their personal health information
• Request corrections to inaccurate records
• Request restrictions on certain uses or disclosures of information
• Request confidential communication when appropriate

Requests for personal health information may be submitted using the contact information below.

My MMJ Doctor uses security practices designed to protect patient data from unauthorized access, disclosure, alteration, or destruction.

Sensitive information transmitted through the platform may be protected using secure communication technologies and controlled access systems.

While no electronic system can guarantee absolute security, My MMJ Doctor implements reasonable safeguards designed to help protect patient information.

Note: This HIPAA Compliance Notice should be read together with the My MMJ Doctor Privacy Policy and Terms of Use, which provide additional information regarding how personal data is collected, used, and protected.