Question:
How long is the information provided to patients via ERAdvisor (wait times, labs ordered etc.) preserved for before it’s purged?
Answer:
Vital has established a data retention and disposal policy in accordance with HIPAA. All HIPAA-related documents are retained for at least 6 years. Upon termination of the contract, we will securely dispose of all information except the information that is required to meet HIPAA. The following documents will be retained securely for at least 6 years:
Logs recording access to and updating of PHI
Security and Privacy Policies
Notices of Privacy Practices
Risk Assessments
Incident and Breach Notification Documentation
Business Associate Agreement (BAA)
Followup Question:
The client was wondering about retention of wait time related data shared with patients. What was this patient told about their wait time on this day/time via ERAdvisor? How long is that data kept for?
Answer:
The data will be disposed along with other information, upon termination of contract. We can provide a copy of data before removing it from our systems.