PRIVACY AND SECURITY IS OUR TOP PRIORITY
Safeguarding patient data is a top priority at Connie, and we go to great lengths to ensure a high level of security. Our technology consists of a combination of open-source tools, HIE-developed systems, and best-of-breed vendors, leveraging years of HIE best practices. This enables us to offer our users the most effective tools for making informed healthcare decisions and promoting patient-centered care.
Connie is dedicated to empowering consumers and advancing public health and has established strategic relationships with leading health information technology vendors and partners. Our technical infrastructure partner, CRISP Shared Services (CSS), is HITRUST and EHNAC (HIEAP) certified, which are the national gold standards for privacy and security. These certifications demonstrate our proactive approach to cybersecurity, data protection, and risk management and require ongoing updates, training, and recertification activities.
In addition to these certifications, CSS also adheres to HIPAA and federal and state regulations and undergoes an annual security audit by a third-party firm. Their comprehensive security program includes the use of advanced security tools and adherence to the NIST Cybersecurity Framework (CSF), providing robust data protection. This collaboration allows us to mitigate risks and provide the utmost security for participating organizations.
Through meticulous planning, coordination, and vendor collaboration, Connie has established the secure exchange of data within the HIE ecosystem, enabling us to provide healthcare providers with timely access to critical information.
By following these privacy and security practices, we ensure that you can have confidence in the security of information shared through Connie to help healthcare providers do what they do best!
PATIENT RIGHTS
State and federal laws gives patients specific rights about their health data and whether it is shared through Connie.
Patients have the right to:
-
Request an Accounting of Disclosures, which is a list of healthcare providers who have accessed your medical records. Connie’s technology vendor, CRISP Shared Services (CSS), will process their request and issue a report by mail or email, depending on the patient's selection. Patients can submit their request via this online form or can email, fax, or mail this downloadable form.
-
Opt-out of Connie. Patients can learn more about opting out by visiting our Opt Out page. Patients can use this online form, or download the PDF which contains email, fax, and mail options for submission.
-
In accordance with HIPAA, patients would be notified if their information has been viewed by an unauthorized person.