How is privacy protected in CommonGround?

This Fact Sheet explains how we ensure information stays safe and protected.

What steps do you take to make sure my information stays safe?

• We use highly secure and reliable servers.
• We use a secure website which means the connection to and from the website is secured and protected from anyone who does not have access to it.
• We use firewalls that keeps hackers, viruses, and worms out of our network and servers.
• All web traffic to and from CommonGround servers is encrypted with 256-bit SSL/TLS. Encryption means that your private information is turned into an unrecognizable form that blocks unauthorized users from being able to read the information within CommonGround. For instance, if you answer “Yes” to a question, it might travel to our server looking like “x&^%--=><m”. This is a way to scramble or disguise your private information. This method is so strong that it is used to protect banking transactions and purchases over the Internet.

How does my clinic protect my security and privacy?

• All staff users are required to set up a strong, complex password in order to access CommonGround.
• Relationships are created within your organization so that only the staff that you work with has access to your information.

What does PDA do to protect my security and privacy?

• We follow federal HIPAA(Health Insurance and Portability and Accountability Act) regulations outlined by the Business Associate Agreement we signed with your clinic.
• We complete quarterly assessments to ensure all PDA staff are adhering to our security standards.
• We complete annual HIPAA and privacy training.
• We have annual security and privacy audits completed by outside parties to make sure our systems are safe and secure.

What can I do to protect my security and privacy?

• Use the My Privacy button within CommonGround. This will let you see the date, time and name of every person who has viewed your private information. If you discover that an unauthorized person has viewed your information, talk with the HIPAA Officer at your organization or ask a staff person who your HIPAA Officer is.
• When you are getting ready to use CommonGround, make sure you or a staff member enters your name and date of birth into CommonGround with you present.
• Make sure you log out of CommonGround when you are finished using it.
• If you have a login to use from home, do not share that information with others.