Privacy Policy

Privacy & Security Statement

Our Commitment to Information Security

Radiology Associates P.C. is committed to protecting the confidentiality, integrity, and availability of the health and sensitive information entrusted to us by the community and organizations we serve.

As a provider of professional radiology interpretation and related healthcare services, we receive, access, transmit, and maintain protected health information (PHI) in connection with services provided to healthcare organizations. Information security and privacy are integral components of our operations and the services we provide.

Security and Compliance

Our information security program is designed to support compliance with applicable federal and state privacy and security requirements, including the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), and applicable provisions of the HIPAA Privacy, Security, and Breach Notification Rules.

Our security practices are also informed by recognized cybersecurity and healthcare security frameworks, including the National Institute of Standards and Technology (NIST) Cybersecurity Framework and the HITRUST Common Security Framework (HITRUST CSF).

These standards and frameworks help guide our approach to risk management, security controls, policies, procedures, and continuous improvement. Reference to a framework does not represent certification under that framework unless expressly stated.

Protecting Health Information

We maintain administrative, physical, and technical safeguards designed to protect PHI and other sensitive information against unauthorized access, use, disclosure, alteration, loss, or destruction.

Our security program incorporates layered safeguards that include, as appropriate:

• Identity and access management based on business need and least privilege;
• Network, infrastructure, endpoint, and system security controls;
• Data protection and secure information exchange;
• Security logging, monitoring, and threat detection;
• Vulnerability, patch, and risk-management processes;
• Workforce security awareness and training; and
• Policies and procedures governing the appropriate handling of sensitive information.

Security controls are periodically evaluated and updated in response to changes in technology, threats, regulatory requirements, and identified risks.

Third-Party Security

We recognize that protecting healthcare information extends to the technology providers and business partners supporting our services.

Third parties that create, receive, maintain, or transmit PHI on our behalf are subject to appropriate privacy, security, and contractual requirements. Where required, Business Associate Agreements are established to define responsibilities for safeguarding PHI. Third-party relationships are evaluated based on the services provided, information involved, associated risk, and applicable regulatory and contractual obligations.

Incident Response and Resilience

Radiology Associates P.C. maintains established processes for identifying, reporting, investigating, containing, and responding to suspected information-security and privacy incidents.

Our incident-response and business-continuity practices are designed to support timely mitigation, recovery, appropriate escalation, and required notifications while maintaining the availability and integrity of services supporting healthcare operations.

Privacy and Appropriate Use

We access, use, and disclose PHI only as permitted by applicable law, contractual requirements, and the purposes for which the information was provided.

Radiology Associates P.C. primarily provides radiology interpretation and related services on behalf of hospitals, clinics, imaging centers, and other healthcare organizations. Questions regarding patient medical records, copies of records, amendments, restrictions, or other patient privacy rights should generally be directed to the healthcare organization from which the patient received care.

We cooperate with the healthcare organizations we serve in fulfilling applicable privacy and security obligations.

Note: This Security & Privacy Statement describes our organizational approach to information security and privacy. It is not intended to serve as a Notice of Privacy Practices or replace one where such a notice is required by law.

Continuous Security Improvement

Cybersecurity is an ongoing risk-management process. We continually evaluate our security posture in response to emerging threats, vulnerabilities, regulatory developments, technological changes, and the results of security and risk-management activities.

Our security program incorporates governance, risk assessment, technical safeguards, workforce responsibilities, third-party risk management, incident response, and business resilience to support the continued protection of healthcare information entrusted to our organization.

Reporting a Security or Privacy Concern

Radiology Associates P.C. takes reports of potential security and privacy concerns seriously.

To report a suspected security vulnerability, privacy concern, unauthorized disclosure, or other information-security issue involving our organization, please contact: 541-681-8586

This statement provides a general overview of Radiology Associates P.C.’s information security and privacy practices. For security reasons, detailed system configurations, security architecture, technologies, and internal procedures are not publicly disclosed. This statement may be updated periodically as regulatory requirements, technologies, threats, and industry practices evolve.