HIPAA & Data Privacy Notice
How patient information and regulated data are addressed in consulting engagements.
Last updated: October 15, 2026
Website inquiries are not a secure PHI channel
Please do not transmit patient names, medical records, screenshots containing patient identifiers, or other protected health information through public contact forms, routine email, or consultation scheduling tools.
Business associate arrangements
When a proposed engagement involves activities that make PracticeGuard a business associate under HIPAA, an appropriate Business Associate Agreement must be executed before the relevant access or processing begins.
Minimum necessary access
Project access should be limited to information and systems necessary for authorized work. Where practical, de-identified, synthetic, or test data should be used for demonstrations and troubleshooting.
Security and coordination
Access controls, approved communication channels, credential handling, and responsibilities for incident response are established according to the engagement and applicable agreements. Client organizations retain their own HIPAA compliance obligations.
No blanket compliance claim
The existence of this notice does not certify PracticeGuard or any client as HIPAA compliant. Applicable safeguards depend on the actual services, systems, data, and contractual relationship.
Discussing a project safely
For an initial discussion, describe the system, vendor, workflow, or problem without sharing patient-identifying information. Contact admin@practiceguard.org to coordinate an appropriate process if sensitive information becomes necessary.