Forensic Laboratories, Inc

Home / Company Profile / Privacy Policy

To the best of Forensic Laboratories knowledge, supplying agencies for software and data processing followed all guidelines in complying with HIPPA security and privacy regulations in the development and the deployment approach for Forensic Laboratories data and reporting product and its associated add on software modules. Forensic Laboratories believes process controls are in place within web based data and reporting product to permit Forensic Laboratories to comply with HIPPA in the use of the web based data and reporting product. Further, we believe the deployment approach using firewalls and the developed security module are sufficient to meet HIPPA security issues. Many of the HIPPA regulations relate to administrative and operational procedures, Forensic Laboratories believes theweb based data and reporting product meets those requirements. This statement highlights development and deployment aspects of the web based data and reporting product to provide confidence that requisite privacy and security standards are met. The elements of HIPPA most pertinent to Toxicology Labs, Drug Courts and Community Courts are discussed below with annotation of web based data and reporting product compliance.

This relates to the means (process and technology) by which an entity protects the confidentiality of health information. The goals of security measures are to keep information secured, and decrease the means of tampering, destruction, or inappropriate access. There are four categories of requirements:

Administrative Procedures - documented, formal practices to protect data
-	While the majority of administrative procedures are under the control of the entity, web based data and reporting product was designed to permit the implementation of procedures to ensure protection of data.
Physical Safeguards - protect data from fire, other natural and environmental hazards, and intrusion
-	User web based data and reporting product will require appropriate physical safeguards. Web based Data and Reporting product deployment recommendation provides a secure/locked location at a clia certified facility with 24 hours surveillance and appropriate protections from disaster.
Technical Security Services - protect information and control individual access to information to the best of our knowledge.
-	Password protections determined by system and/or vendor administrators restrict access to database information.
Technical Security Mechanisms - guard against unauthorized access to data over communications network
-	All data transmissions are protected with industry standard encryption.

refers to the individuals right to keep certain information private, unless that information will be used or disclosed with his or her permission. Privacy topics include:

Consent/Authorization Issues/Procedures/Processes
-	Appropriately designated individuals and formal procedures within the Web based Data and Reporting product determine control of access.
Business Associates Requirements
-	Forensic Laboratories Web based Data and Reporting product vendor has a history and in place Business Associate Agreements related to HIPPA and other security and privacy issues. The parent company is a high level corporation, so they have extensive experience with maintaining security and it is a high priority for all of their business. Forensic Laboratories or its vendors will sign Business Associate Agreements as required.