{"id":690,"date":"2024-05-15T14:07:16","date_gmt":"2024-05-15T14:07:16","guid":{"rendered":"https:\/\/newhopecorp.org\/?page_id=690"},"modified":"2026-09-17T15:04:40","modified_gmt":"2026-09-17T15:04:40","slug":"privacy-protections","status":"publish","type":"page","link":"https:\/\/newhopecorp.org\/es\/privacy-protections\/","title":{"rendered":"Protecci\u00f3n de privacidad"},"content":{"rendered":"

New Hope CORPS HIPAA Política de privacidad<\/span><\/b> <\/span><\/p>\n

Fecha de revisión: 29 de abril de 2024<\/span><\/i> <\/span><\/p>\n

    \n
  1. Designation of Privacy and Contact Officials<\/span><\/b><\/li>\n<\/ol>\n

    Definición<\/span><\/b> <\/span><\/p>\n

      \n
    • Información sobre la salud protegida (PHI):<\/span><\/b> Cualquier información individual identificable relacionada con la salud de una persona o la del proveedor de atención médica de una persona que pueda utilizarse para identificar a la persona.<\/span> <\/span><\/li>\n<\/ul>\n

      De conformidad con 45 CFR 164.530(a)(1)(i), New Hope CORPS ha designado al siguiente miembro del personal como funcionario de privacidad del organismo responsable de la elaboración y aplicación de políticas y procedimientos HIPAA. Además, New Hope CORPS la ha designado como la Persona de Contacto disponible para recibir quejas y proporcionar información sobre nuestro Aviso de Política de Privacidad de acuerdo con 45 CFR 164.530(a)(1)(ii).:<\/span> <\/span><\/p>\n

      Maritza Carvajal, MCAP, BHCMS, FM<\/span>
      \nDirector of QA\/HR<\/span>
      \nNew Hope CORPS, Inc.<\/span>
      \n1020 N Krome Avenue<\/span>
      \nHomestead, Fl 33030<\/span> <\/span><\/p>\n

        \n
      1. Capacitación y documentación<\/span><\/b><\/li>\n<\/ol>\n

        New Hope CORPS se asegurará de que todos los miembros de su personal reciban formación sobre la Regla de Privacidad de HIPAA según lo especificado en 45 CFR 164.530(b). Los nuevos miembros recibirán capacitación dentro de un plazo razonable para incorporarse a nuestra fuerza de trabajo. Además, se comunicarán los cambios en las políticas o procedimientos y se impartirá capacitación oportunamente. La documentación de esa capacitación se mantiene de conformidad con las políticas de organización y las normas federales.<\/span> <\/span><\/p>\n

        III. Proceso de denuncia<\/span><\/b> <\/span><\/p>\n

        De conformidad con 45 CFR 164.530(d)(1), New Hope CORPS ha establecido el siguiente proceso para que las personas presenten quejas sobre nuestras prácticas de privacidad o nuestro cumplimiento de estas prácticas. Todas las denuncias y sus disposiciones se documentan según lo dispuesto en 45 CFR 164.530(d)(2).<\/span> <\/span><\/p>\n

        Procedimiento para tramitar las denuncias de privacidad en New Hope CORPS<\/span><\/b> <\/span><\/p>\n

        Objetivo:<\/span><\/b>
        \nEstablecer un procedimiento normalizado para tramitar las denuncias relacionadas con las prácticas de privacidad en New Hope CORPS, de conformidad con 45 CFR 164.530(d)(1) y 45 CFR 164.530(d)(2).<\/span> <\/span><\/p>\n

        Alcance:<\/span><\/b>
        \nThis procedure applies to all complaints received concerning the privacy practices of New Hope CORPS or its compliance with these practices.<\/span> <\/span><\/p>\n

        Procedimiento:<\/span><\/b> <\/span><\/p>\n

          \n
        1. Recibiendo Quejas:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
            \n
          • Las quejas pueden ser enviadas por particulares por correo electrónico, correo postal, teléfono o en persona.<\/span> <\/span><\/li>\n
          • Todas las denuncias deben dirigirse al Oficial de Privacidad designado en New Hope CORPS.<\/span> <\/span><\/li>\n<\/ul>\n
              \n
            1. Denuncias de registro:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                \n
              • Una vez recibida, el Oficial de Privacidad registra cada denuncia en el Registro de Denuncias de Privacidad. El registro incluye la fecha recibida, la naturaleza de la denuncia y la información de contacto del autor.<\/span> <\/span><\/li>\n<\/ul>\n
                  \n
                • The Privacy Officer assigns a unique identifier to each complaint for tracking purposes.<\/span> <\/span><\/li>\n
                • The privacy officer notifies all the parties involved, including individuals affected, funding sources and licensing body.<\/span> <\/span><\/li>\n<\/ul>\n
                    \n
                  1. Reconocimiento de Quejas:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                      \n
                    • The Privacy Officer acknowledges receipt of the complaint to the complainant within five business days, providing the complainant with the assigned complaint number and an overview of the complaint process.<\/span> <\/span><\/li>\n<\/ul>\n
                        \n
                      1. Investigación:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                          \n
                        • The Privacy Officer investigates the complaint, gathering relevant information and documentation. Esto puede implicar entrevistar a los funcionarios, revisar las políticas de privacidad y otras medidas pertinentes.<\/span> <\/span><\/li>\n
                        • The investigation should be thorough and impartial, aiming to conclude within 30 days of the complaint receipt.<\/span> <\/span><\/li>\n<\/ul>\n
                            \n
                          1. Resolución y respuesta:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                              \n
                            • Al completar la investigación, el Oficial de Privacidad determina el curso adecuado de acción y documenta la decisión.<\/span> <\/span><\/li>\n
                            • Se informa al autor de los resultados de la investigación y de las medidas adoptadas o que deben adoptarse. Esta comunicación debe presentarse a más tardar cinco días hábiles después de la conclusión de la investigación.<\/span> <\/span><\/li>\n<\/ul>\n
                                \n
                              1. Documentación:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                  \n
                                • Las actas detalladas de cada denuncia, el proceso de investigación y la resolución se llevan según lo dispuesto en 45 CFR 164.530(d)(2).<\/span> <\/span><\/li>\n
                                • Toda la documentación se mantiene segura y confidencial, accesible únicamente al personal autorizado.<\/span> <\/span><\/li>\n<\/ul>\n
                                    \n
                                  1. Examen y mejora:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                      \n
                                    • El Oficial de Privacidad examina periódicamente todas las denuncias presentadas y sus disposiciones para determinar patrones o cuestiones recurrentes que pueden requerir cambios en las prácticas de privacidad o formación adicional del personal.<\/span> <\/span><\/li>\n
                                    • Las recomendaciones para mejoras se presentan al equipo de gestión para su examen.<\/span> <\/span><\/li>\n<\/ul>\n

                                      Retención de documentación:<\/span><\/b> <\/span><\/p>\n

                                        \n
                                      • Todos los registros relacionados con las quejas de privacidad y sus resoluciones se conservan durante un mínimo de siete años a partir de la fecha de su creación o la fecha en que fueron vigentes, lo que sea más tarde.<\/span> <\/span><\/li>\n<\/ul>\n

                                        Formación:<\/span><\/b> <\/span><\/p>\n

                                          \n
                                        • Todos los funcionarios reciben capacitación sobre este procedimiento de tramitación de denuncias como parte de su inscripción inicial y reciben formación anual de actualización para asegurar que comprendan sus funciones y responsabilidades en relación con las prácticas de privacidad.<\/span> <\/span><\/li>\n<\/ul>\n

                                          Este procedimiento garantiza que New Hope CORPS siga cumpliendo con las normas HIPAA, respetando la privacidad y seguridad de toda la información personal y manejando cualquier preocupación de manera rápida y efectiva.<\/span> <\/span><\/p>\n

                                           <\/span><\/p>\n

                                            \n
                                          1. No intimidación y no represalia<\/span><\/b><\/li>\n<\/ol>\n

                                            New Hope CORPS se abstiene de cualquier acto de intimidación o represalia contra personas que ejercen sus derechos bajo HIPAA, como se indica en 45 CFR 164.530(g).<\/span> <\/span><\/p>\n

                                              \n
                                            1. Non-Waiver of Rights<\/span><\/b><\/li>\n<\/ol>\n

                                              New Hope CORPS no requiere que las personas renuncien a sus derechos bajo HIPAA como condición de tratamiento o beneficio elegibilidad, respetando las estipulaciones de 45 CFR 164.530(h).<\/span> <\/span><\/p>\n

                                                \n
                                              1. Amendments to PHI<\/span><\/b><\/li>\n<\/ol>\n

                                                De conformidad con 45 CFR 164.526(a)(1), New Hope CORPS ha creado los siguientes procedimientos para modificar la información de salud protegida solicitada o acordada.<\/span> <\/span><\/p>\n

                                                Procedimiento:<\/span><\/b> <\/span><\/p>\n

                                                  \n
                                                1. Solicitud de enmienda:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                    \n
                                                  • Las personas que deseen solicitar una enmienda a su PHI deben presentar su solicitud por escrito al Oficial de Privacidad. The request must clearly identify the information to be amended and the basis for the amendment.<\/span> <\/span><\/li>\n
                                                  • Se proporcionará un formulario estándar para solicitar enmiendas a las personas bajo petición y también está disponible en el sitio web de New Hope CORPS.<\/span> <\/span><\/li>\n<\/ul>\n
                                                      \n
                                                    1. Recepción y registro de solicitudes:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                        \n
                                                      • El Oficial de Privacidad registra cada solicitud al recibir, registrar la fecha recibida, la naturaleza de la solicitud y la información de contacto del solicitante.<\/span> <\/span><\/li>\n
                                                      • El solicitante recibe un acuse de recibo dentro de cinco días hábiles.<\/span> <\/span><\/li>\n<\/ul>\n
                                                          \n
                                                        1. Examen de la solicitud:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                            \n
                                                          • The Privacy Officer reviews the request to determine if the amendment is warranted under the HIPAA guidelines, which usually include reasons such as the information being inaccurate or incomplete.<\/span> <\/span><\/li>\n
                                                          • El Oficial de Privacidad puede consultar con los proveedores de atención médica pertinentes o con la persona que originalmente registró la información, si es necesario, para evaluar la validez de la solicitud.<\/span> <\/span><\/li>\n<\/ul>\n
                                                              \n
                                                            1. Decisión y notificación:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                \n
                                                              • La decisión de modificar o denegar la solicitud debe adoptarse a más tardar 60 días después de la recepción de la solicitud. Si se necesita tiempo adicional, se podrá notificar al solicitante la demora y las razones de ésta, y el período de decisión podrá prorrogarse por no más de 30 días adicionales.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                  \n
                                                                • Si se aprueba la enmienda, New Hope CORPS hará la enmienda apropiada al PHI e informará al solicitante de que se hayan introducido los cambios.<\/span> <\/span><\/li>\n
                                                                • If the request is denied, the requester will be informed in writing of the decision and the reasons for the denial, along with their rights to submit a written desacuerdoment and to have the request and denial, along with any statement of desacuerdo, appended to their PHI.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                    \n
                                                                  1. Aplicación de las enmiendas:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                      \n
                                                                    • Si se hace una enmienda, New Hope CORPS hará esfuerzos razonables para informar y proporcionar la enmienda dentro de un plazo razonable a las personas identificadas por el individuo como necesidad de la información modificada, y a las personas, incluidos los asociados empresariales, que podrían haber dependido de la información en detrimento de la persona o podrían confiar en ella.<\/span> <\/span><\/li>\n
                                                                    • Todas las enmiendas se documentarán en los registros de salud del individuo, incluyendo la fecha de la enmienda y un enlace o referencia a la información original.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                        \n
                                                                      1. Documentación y grabación:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                          \n
                                                                        • La documentación de todas las solicitudes, comunicaciones, decisiones y acciones relacionadas con las enmiendas de PHI será mantenida por el Oficial de Privacidad durante al menos siete años a partir de la fecha de su creación o la fecha en que fue última en vigor, lo que sea más tarde.<\/span> <\/span><\/li>\n
                                                                        • Estos registros se mantendrán de una manera que preserve su confidencialidad y seguridad.<\/span> <\/span><\/li>\n<\/ul>\n

                                                                          Este procedimiento garantiza que New Hope CORPS siga cumpliendo con las normas HIPAA relativas a la enmienda del PHI, respetando los derechos de las personas a corregir su información sanitaria y garantizando la exactitud e integridad de los registros mantenidos por New Hope CORPS.<\/span> <\/span><\/p>\n

                                                                           <\/span><\/p>\n

                                                                          VII. Contabilidad de las revelaciones<\/span><\/b> <\/span><\/p>\n

                                                                          New Hope CORPS mantiene registros y proporciona información sobre la información de salud protegida según lo requerido por 45 CFR 164.528.<\/span> <\/span><\/p>\n

                                                                          VIII. Safeguarding PHI<\/span><\/b> <\/span><\/p>\n

                                                                          New Hope CORPS sigue las Salvaguardias Administrativas establecidas en 45 CFR 164.308 para garantizar la confidencialidad, integridad y disponibilidad de información sanitaria electrónica protegida (ePHI).<\/span> <\/span><\/p>\n

                                                                            \n
                                                                          1. Acuerdos asociados para empresas<\/span><\/b><\/li>\n<\/ol>\n

                                                                            Se obtienen garantías adecuadas de los asociados empresariales y subcontratistas que manejan el ePHI en nombre de New Hope CORPS, cumpliendo los requisitos de 45 CFR 164.308(b)(1) y b)(2), así como los artículos pertinentes de la Ley HITECH.<\/span> <\/span><\/p>\n

                                                                              \n
                                                                            1. Política de sanciones<\/span><\/b><\/li>\n<\/ol>\n

                                                                              De conformidad con 45 CFR 164.308 a)(1)(ii)(C) y 164.530(e)(1), New Hope CORPS tiene una política de sanciones para hacer frente al incumplimiento de las políticas HIPAA por parte de los miembros de la fuerza de trabajo o asociados comerciales.<\/span> <\/span><\/p>\n

                                                                              Procedimiento para la aplicación de sanciones para la no conformidad de HIPAA en Nueva Esperanza CORPS<\/span><\/b> <\/span><\/p>\n

                                                                              Objetivo:<\/span><\/b>
                                                                              \nTo outlined a clear and enforceable sanctions policy at New Hope CORPS for addressing non-compliance with HIPAA policies by labour members or business associates, in accordance with 45 CFR 164.308(a)(1)(ii)(C) and 164.530(e)(1).<\/span> <\/span><\/p>\n

                                                                              Alcance:<\/span><\/b>
                                                                              \nEste procedimiento se aplica a todos los miembros de la fuerza de trabajo, incluidos los empleados, voluntarios, aprendices y otras personas cuya conducta, en el desempeño del trabajo para New Hope CORPS, está bajo el control directo de New Hope CORPS, ya sean o no pagados por la organización. También se extiende a los socios comerciales si se estipula en los acuerdos asociados comerciales respectivos.<\/span> <\/span><\/p>\n

                                                                              Procedimiento:<\/span><\/b> <\/span><\/p>\n

                                                                                \n
                                                                              1. Identificación de no cumplimiento:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                  \n
                                                                                • El incumplimiento puede identificarse mediante auditorías periódicas, exámenes de cumplimiento, sistemas de presentación de informes sobre incidentes o durante investigaciones de infracciones denunciadas.<\/span> <\/span><\/li>\n
                                                                                • Todos los casos identificados de incumplimiento deben notificarse inmediatamente al Oficial de Privacidad designado.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                    \n
                                                                                  1. Evaluación inicial:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                      \n
                                                                                    • El Oficial de Privacidad realiza una evaluación preliminar para determinar la gravedad del incumplimiento.<\/span> <\/span><\/li>\n
                                                                                    • Si el incumplimiento implica a un socio comercial, el Oficial de Privacidad revisará los términos del acuerdo comercial asociado para determinar la respuesta adecuada.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                        \n
                                                                                      1. Investigación:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                          \n
                                                                                        • Se inicia una investigación oficial si la evaluación inicial indica un posible incumplimiento grave.<\/span> <\/span><\/li>\n
                                                                                        • The investigation will gather all relevant facts, including interviewing witnesses, examining relevant documents, and other necessary actions.<\/span> <\/span><\/li>\n
                                                                                        • The investigation must be impartial and thorough, aiming to conclude within an established timeframe, usually no longer than 30 days from the initiated.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                            \n
                                                                                          1. Decisión sobre las sanciones:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                              \n
                                                                                            • Based on the investigation findings, the Privacy Officer, in consultation with Human Resources and legal counsel if necessary, determines the appropriate sanction(s).<\/span> <\/span><\/li>\n
                                                                                            • Sanctions may range from written warnings to termination of employment or contract, depending on the severity of the violation.<\/span> <\/span><\/li>\n
                                                                                            • Factors considered in determining sanctions include the nature and extent of the harm resulting from the violation, the history of previous violations by the individual or entity, and whether the violation was intentional or unintentional.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                                \n
                                                                                              1. Implementation of Sanctions:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                                  \n
                                                                                                • Sanctions are promptly implemented according to the decision.<\/span> <\/span><\/li>\n
                                                                                                • In cases involving business associates, actions may include modification of the contract terms, suspension of services, or termination of the agreement, as stipulated in the business associate agreement.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                                    \n
                                                                                                  1. Notification and Documentation:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                                      \n
                                                                                                    • The individual or entity subject to sanctions will be notified in writing of the decision and the reasons for the sanctions.<\/span> <\/span><\/li>\n
                                                                                                    • All decisions and actions related to sanctions will be documented, including the rationale for the level of sanction applied. These documents will be retained for a minimum of six years from the date of the sanction implementation.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                                        \n
                                                                                                      1. Appeal Process:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                                          \n
                                                                                                        • The sanctioned party has the right to appeal the decision. The appeal must be submitted in writing to the Privacy Officer within 15 days of receiving the sanction notification.<\/span> <\/span><\/li>\n
                                                                                                        • The appeal will be reviewed by a panel composed of the Privacy Officer, a representative from Human Resources, and another senior management member not involved in the initial decision.<\/span> <\/span><\/li>\n
                                                                                                        • The decision of the appeal panel is final and will be communicated to the appellant within 30 days of the appeal submission.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                                            \n
                                                                                                          1. Training and Awareness:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                                              \n
                                                                                                            • All workforce members and relevant business associates are trained on this sanctions policy as part of their initial training and through annual refresher courses.<\/span> <\/span><\/li>\n
                                                                                                            • This training emphasizes the importance of compliance with HIPAA regulations and the consequences of non-compliance.<\/span> <\/span><\/li>\n<\/ul>\n

                                                                                                              This procedure ensures that New Hope CORPS maintains a robust compliance environment that addresses and corrects HIPAA non-compliance effectively, thereby protecting the privacy and security of all protected health information handled by the organization.<\/span> <\/span><\/p>\n

                                                                                                               <\/span><\/p>\n

                                                                                                                \n
                                                                                                              1. Security Management<\/span><\/b><\/li>\n<\/ol>\n

                                                                                                                New Hope CORPS has appointed a Security Official responsible for the development and implementation of policies and procedures required by 45 CFR 164 Subpart C. The appointed security official is:<\/span> <\/span><\/p>\n

                                                                                                                James Doughterty, BA<\/span><\/b>
                                                                                                                \nDirector of Operations<\/span>
                                                                                                                \nNew Hope CORPS<\/span>
                                                                                                                \n1020 N Krome Avenue<\/span>
                                                                                                                \nhomestead, Florida 33030<\/span>
                                                                                                                \nTel 786-243-1003 Ext 217<\/span> <\/span><\/p>\n

                                                                                                                XII. Risk Analysis and Management<\/span><\/b> <\/span><\/p>\n

                                                                                                                Consistent with 45 CFR 164.308(a)(1)(ii)(A) and (B), New Hope CORPS conducts thorough risk analyses and implements security measures to mitigate identified risks as outlined in its plan.<\/span> <\/span><\/p>\n

                                                                                                                XIII. Facility and Technical Safeguards<\/span><\/b> <\/span><\/p>\n

                                                                                                                New Hope CORPS implements Physical and Technical Safeguards as per 45 CFR 164.310 and 164.312 to protect ePHI.<\/span> <\/span><\/p>\n

                                                                                                                XIV. Notice of Privacy Practices<\/span><\/b> <\/span><\/p>\n

                                                                                                                New Hope CORPS provides a Notice of Privacy Practices that meets the content requirements of 45 CFR 164.520(b) and is made available to individuals per 45 CFR 164.520(c).<\/span> <\/span><\/p>\n

                                                                                                                  \n
                                                                                                                1. Amendments to the Policy<\/span><\/b><\/li>\n<\/ol>\n

                                                                                                                  New Hope CORPS reserves the right to amend this policy and will provide individuals with a revised notice.<\/span> <\/span><\/p>\n

                                                                                                                  Contact Information for Privacy Concerns:<\/span><\/b> <\/span><\/p>\n

                                                                                                                  Privacy Official: Maritza Carvajal <\/span><\/i>
                                                                                                                  \nTel 786-243-1003 Ext 223 <\/span><\/i>
                                                                                                                  \nemail: mcarvajal@newhopecorp.org<\/span><\/i> <\/span><\/p>\n

                                                                                                                  XVI. Individual Rights<\/span><\/b> <\/span><\/p>\n

                                                                                                                  New Hope CORPS acknowledges and upholds individual rights under HIPAA, including but not limited to:<\/span> <\/span><\/p>\n

                                                                                                                    \n
                                                                                                                  • The right to request restrictions on uses and disclosures of PHI (45 CFR 164.520(b)(1)(iv)(A)).<\/span> <\/span><\/li>\n
                                                                                                                  • The right to receive confidential communications (45 CFR 164.520(b)(1)(iv)(B)).<\/span> <\/span><\/li>\n
                                                                                                                  • The right to inspect and copy PHI (45 CFR 164.520(b)(1)(iv)(C)).<\/span> <\/span><\/li>\n
                                                                                                                  • The right to amend PHI (45 CFR 164.520(b)(1)(iv)(D)).<\/span> <\/span><\/li>\n
                                                                                                                  • The right to receive an accounting of disclosures (45 CFR 164.520(b)(1)(iv)(E)).<\/span> <\/span><\/li>\n<\/ul>\n

                                                                                                                    XVII. Notice of Privacy Practices<\/span><\/b> <\/span><\/p>\n

                                                                                                                    New Hope CORPS’s Notice of Privacy Practices:<\/span> <\/span><\/p>\n

                                                                                                                      \n
                                                                                                                    • Is written in plain language (45 CFR 164.520(b)(1)).<\/span> <\/span><\/li>\n
                                                                                                                    • Includes all required elements as listed in the CFR and as pertains to New Hope CORPS.<\/span> <\/span><\/li>\n
                                                                                                                    • Is available upon request and prominently posted and available at service delivery sites (45 CFR 164.520(c)(2)(iii)(A) and (B)).<\/span> <\/span><\/li>\n<\/ul>\n

                                                                                                                      XVIII. Changes to Privacy Practices<\/span><\/b> <\/span><\/p>\n

                                                                                                                      New Hope CORPS reserves the right to change its privacy practices as stated in the notice (45 CFR 164.520(b)(1)(v)©).<\/span> <\/span><\/p>\n

                                                                                                                      XIX. Filing Complaints<\/span><\/b> <\/span><\/p>\n

                                                                                                                      Individuals may file complaints directly with New Hope CORPS or with the Secretary of the U.S. Department of Health and Human Services if they believe their privacy rights have been violated. New Hope CORPS will not retaliate against anyone for filing a complaint (45 CFR 164.520(b)(1)(vi)).<\/span> <\/span><\/p>\n

                                                                                                                        \n
                                                                                                                      1. Contact Information for Filing Complaints<\/span><\/b><\/li>\n<\/ol>\n

                                                                                                                        For further information or to file a complaint, please contact: <\/span>
                                                                                                                        \nPrivacy Official: Maritza Carvajal <\/span><\/i>
                                                                                                                        \n1020 N Krome Avenue<\/span><\/i>
                                                                                                                        \nHomestead, FL 33030<\/span><\/i>
                                                                                                                        \nTel 786-243-1003 Ext 223 <\/span><\/i>
                                                                                                                        \nemail: mcarvajal@newhopecorp.org<\/span><\/i> <\/span><\/p>\n

                                                                                                                         <\/span><\/p>\n

                                                                                                                        XXI. Effective Date and Notice<\/span><\/b> <\/span><\/p>\n

                                                                                                                        New Hope CORPS will alert individuals to any policy changes and provide them with the updated policy as required (45 CFR 164.520(b)(1)(viii)).<\/span> <\/span><\/p>\n

                                                                                                                        XXII. Documentation and Record Retention<\/span><\/b> <\/span><\/p>\n

                                                                                                                        New Hope CORPS will maintain all records related to its HIPAA compliance efforts, including training documentation, complaint records, and policies and procedures updates. All documentation will be retained for the time period required by law, which is typically six years from the date of its creation or the date when it last was in effect, whichever is later (45 CFR 164.530(j)).<\/span> <\/span><\/p>\n

                                                                                                                        XXIII. Data <\/span><\/b>Breach Procedures<\/span><\/b> <\/span><\/p>\n

                                                                                                                        In accordance with 45 CFR 164.410 and the Business Associate Agreement Section 3.b.(ii), New Hope CORPS has implemented the following policies and procedures to report any unauthorized use or disclosure of PHI. In case of a breach, New Hope CORPS will notify affected individuals, the Secretary of Health and Human Services, licensing body, funding sources and potentially, the media, in a manner consistent with the law and without unreasonable delay.<\/span> <\/span><\/p>\n

                                                                                                                         <\/span><\/p>\n

                                                                                                                        These Data Breach Policies and Procedures are established to comply with the Health Insurance Portability and Accountability Act (HIPAA) regulations, particularly 45 CFR 164.410, the Business Associate Agreement with SFBHN, and Standard Contract ME225-XX-37. They outline the steps New Hope will take to identify, report, and mitigate potential or actual breaches of protected health information (PHI).<\/span> <\/span>Definitions<\/span><\/b> <\/span><\/p>\n

                                                                                                                          \n
                                                                                                                        • Breach:<\/span><\/b> The unauthorized acquisition, access, use, or disclosure of PHI.<\/span> <\/span><\/li>\n
                                                                                                                        • Potential Breach:<\/span><\/b> An event that poses a risk of unauthorized access to PHI.<\/span> <\/span><\/li>\n<\/ul>\n

                                                                                                                          Identifying a Breach<\/span><\/b> <\/span>New Hope shall implement these procedures to detect and investigate potential or actual breaches of PHI. This may include:<\/span> <\/span><\/p>\n

                                                                                                                            \n
                                                                                                                          • Regular security risk assessments<\/span> <\/span><\/li>\n
                                                                                                                          • Monitoring system activity logs<\/span> <\/span><\/li>\n
                                                                                                                          • Employee training to identify and report suspicious activity.<\/span> <\/span><\/li>\n
                                                                                                                          • Receiving reports from individuals suspecting a breach<\/span> <\/span><\/li>\n<\/ul>\n

                                                                                                                            Reporting a Breach<\/span><\/b> <\/span>In the event of a suspected or confirmed breach, New Hope will take the following actions:<\/span> <\/span><\/p>\n

                                                                                                                              \n
                                                                                                                            1. Internal Notification:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                                                                \n
                                                                                                                              • Immediately notify internal personnel, including the Security Officer, Privacy Officer, and relevant managers.<\/span> <\/span><\/li>\n
                                                                                                                              • Initiate an investigation to determine the nature and scope of the breach.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                                                                  \n
                                                                                                                                1. Reporting to SFBHN:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                                                                    \n
                                                                                                                                  • Notify the SFBHN Security Officer, Privacy Officer, and Contract Manager within <\/span>four (4) business days<\/span><\/b> of determining a potential or actual breach.<\/span> <\/span><\/li>\n
                                                                                                                                  • The notification will include details of the breach, including the date, affected individuals (if known), and the steps New Hope is taking to mitigate the breach.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                                                                      \n
                                                                                                                                    1. Notification to Department of Health and Human Services (HHS):<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                                                                        \n
                                                                                                                                      • New Hope will follow the Department of Health and Human Services (HHS) guidelines to determine if notification to HHS is required.<\/span> <\/span><\/li>\n
                                                                                                                                      • If HHS notification is required, New Hope will notify the SFBHN Privacy Officer and Contract Manager within <\/span>twenty-four (24) hours<\/span><\/b> of receiving notification from HHS.<\/span> <\/span><\/li>\n<\/ul>\n
                                                                                                                                          \n
                                                                                                                                        1. Notification to Affected Individuals:<\/span><\/b> <\/span><\/li>\n<\/ol>\n
                                                                                                                                            \n
                                                                                                                                          • If the breach affects a significant number of individuals (as defined by HHS regulations), New Hope will provide written notification to the affected individuals within <\/span>thirty (30) days<\/span><\/b> of determining the breach.<\/span> <\/span><\/li>\n
                                                                                                                                          • The notification will explain the nature of the breach, the affected information, steps individuals can take to protect themselves, and contact information for New Hope.<\/span> <\/span><\/li>\n<\/ul>\n

                                                                                                                                            Mitigation Procedures<\/span><\/b> <\/span>New Hope will take steps to mitigate any potential harm caused by a breach. This may include:<\/span> <\/span><\/p>\n

                                                                                                                                              \n
                                                                                                                                            • Resetting passwords or access codes<\/span> <\/span><\/li>\n
                                                                                                                                            • Offering credit monitoring or identity theft protection services to affected individuals.<\/span> <\/span><\/li>\n
                                                                                                                                            • Implementing additional security measures to prevent future breaches.<\/span> <\/span><\/li>\n<\/ul>\n

                                                                                                                                              Subcontractor Requirements<\/span><\/b> <\/span>New Hope will require all subcontractors to comply with these Data Breach Policies and Procedures. This will be achieved through contractual agreements that require subcontractors to:<\/span> <\/span><\/p>\n

                                                                                                                                                \n
                                                                                                                                              • Implement procedures to identify and report breaches.<\/span> <\/span><\/li>\n
                                                                                                                                              • Notify New Hope of any breaches involving New Hope data.<\/span> <\/span><\/li>\n
                                                                                                                                              • Cooperate with New Hope’s breach response efforts.<\/span> <\/span><\/li>\n<\/ul>\n

                                                                                                                                                Training<\/span><\/b> <\/span>New Hope will provide regular training to all employees on HIPAA regulations and these Data Breach Policies and Procedures. The training will emphasize the importance of protecting PHI and how to identify and report potential breaches.<\/span> <\/span>Review and Updates<\/span><\/b> <\/span>New Hope will periodically review and update these Data Breach Policies and Procedures to ensure they remain compliant with HIPAA regulations and best practices.<\/span> <\/span>Recordkeeping<\/span><\/b> <\/span>New Hope will maintain records of all breaches, including the nature of the breach, the affected individuals, the actions taken to mitigate the breach, and any communications with SFBHN or HHS.<\/span> <\/span><\/p>\n

                                                                                                                                                By implementing these Data Breach Policies and Procedures, New Hope is committed to protecting the privacy and security of PHI. We will take all necessary steps to identify, report, and mitigate any potential or actual breaches of PHI.<\/span> <\/span><\/p>\n

                                                                                                                                                XXIV. <\/span><\/b>Mitigation of Harm<\/span><\/b> <\/span><\/p>\n

                                                                                                                                                In the event of a use or disclosure of PHI that is in violation of the policy, New Hope CORPS will mitigate, to the extent practicable, any harmful effect that is known. This includes taking immediate corrective actions to prevent further unauthorized use or disclosure and addressing any harmful consequences that may have occurred as a result of the breach (Business Associate Agreement, Amendment. 3. Section 3.d.).<\/span> <\/span><\/p>\n

                                                                                                                                                 <\/span><\/p>\n

                                                                                                                                                XXV. Privacy Policy Notice Distribution<\/span><\/b> <\/span><\/p>\n

                                                                                                                                                New Hope CORPS shall provide the Notice of Privacy Practices to all individuals at the first service delivery and upon request. The notice will also be posted on the New Hope CORPS website to ensure accessibility (45 CFR 164.520(c)(2)(iii)(A) and (B)).<\/span> <\/span><\/p>\n

                                                                                                                                                XXVI. Updates to Privacy Policy<\/span><\/b> <\/span><\/p>\n

                                                                                                                                                New Hope CORPS acknowledges its duty to maintain up-to-date privacy policies. If New Hope CORPS decides to revise its privacy practices, the changes will be effective for all PHI that it maintains. Individuals will be informed of any significant changes to the policies through a revised notice that will be made available upon request and on the New Hope CORPS website (45 CFR 164.520(b)(1)(v)(C)).<\/span> <\/span><\/p>\n

                                                                                                                                                XXVII. Policy Availability and Acknowledgment<\/span><\/b> <\/span><\/p>\n

                                                                                                                                                A copy of this policy and any subsequent revisions shall be available to all members of the workforce, individuals receiving services, and other stakeholders as applicable. Acknowledgment of receipt of this policy will be documented for each individual served upon the first service delivery or enrollment.<\/span> <\/span><\/p>\n

                                                                                                                                                XXVIII. Oversight and Enforcement<\/span><\/b> <\/span><\/p>\n

                                                                                                                                                New Hope CORPS’s Privacy Officer is responsible for ongoing oversight and enforcement of the HIPAA Privacy Policy. This includes periodic risk assessments, monitoring compliance with the privacy practices, and ensuring that any privacy issues are resolved in accordance with the established procedures.<\/span> <\/span><\/p>\n

                                                                                                                                                XXIX. Relations with Business Associates<\/span><\/b> <\/span><\/p>\n

                                                                                                                                                New Hope CORPS ensures that all business associates who handle PHI on behalf of the organization agree to the same restrictions and conditions that apply to the organization regarding such information, as stipulated in 45 CFR 164.504(e) and the HITECH Act.<\/span> <\/span><\/p>\n

                                                                                                                                                XXX. Governing Law<\/span><\/b> <\/span><\/p>\n

                                                                                                                                                This HIPAA Privacy Policy shall be governed by and construed in accordance with federal HIPAA standards, state privacy laws, and any other applicable regulations. Should any conflict arise between state and federal laws, the law that provides the greater protection for PHI will be followed.<\/span> <\/span><\/p>\n

                                                                                                                                                New Hope CORPS is committed to upholding the privacy and security of PHI and to adhering to the requirements set forth by HIPAA and the HITECH Act. This policy will be reviewed annually or upon the enactment of significant regulatory changes, and training will be provided to all members of the workforce to ensure continued compliance.<\/span> <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

                                                                                                                                                New Hope CORPS HIPAA Política de privacidad  Fecha de revisión: 29 de abril de 2024  Designation of Privacy and Contact Officials Definición  Información sobre la salud protegida (PHI): Cualquier información individual identificable relacionada con la salud de una persona o la del proveedor de atención médica de una persona que pueda utilizarse para identificar a…<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"class_list":["post-690","page","type-page","status-publish","hentry"],"yoast_head":"\nProtecci\u00f3n de privacidad<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newhopecorp.org\/es\/privacy-protections\/\" \/>\n<meta property=\"og:locale\" content=\"es_MX\" \/>\n<meta property=\"og:locale:alternate\" content=\"en_US\" \/>\n<meta property=\"og:locale:alternate\" content=\"fr_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Protecci\u00f3n de privacidad\" \/>\n<meta property=\"og:description\" content=\"New Hope CORPS HIPAA Política de privacidad  Fecha de revisión: 29 de abril de 2024  Designation of Privacy and Contact Officials Definición  Información sobre la salud protegida (PHI): Cualquier información individual identificable relacionada con la salud de una persona o la del proveedor de atención médica de una persona que pueda utilizarse para identificar a…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newhopecorp.org\/es\/privacy-protections\/\" \/>\n<meta property=\"og:site_name\" content=\"New Hope CORPS\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-17T15:04:40+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@corpshope\" \/>\n<meta name=\"twitter:label1\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data1\" content=\"16 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/newhopecorp.org\\\/privacy-protections\\\/\",\"url\":\"https:\\\/\\\/newhopecorp.org\\\/privacy-protections\\\/\",\"name\":\"Protecci\u00f3n de privacidad\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/newhopecorp.org\\\/#website\"},\"datePublished\":\"2024-05-15T14:07:16+00:00\",\"dateModified\":\"2026-09-17T15:04:40+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/newhopecorp.org\\\/privacy-protections\\\/#breadcrumb\"},\"inLanguage\":\"es-MX\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/newhopecorp.org\\\/privacy-protections\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/newhopecorp.org\\\/privacy-protections\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/newhopecorp.org\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Protections\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/newhopecorp.org\\\/#website\",\"url\":\"https:\\\/\\\/newhopecorp.org\\\/\",\"name\":\"New Hope CORPS\",\"description\":\"Meeting your behavioral healthcare needs since 1993\",\"publisher\":{\"@id\":\"https:\\\/\\\/newhopecorp.org\\\/#organization\"},\"alternateName\":\"New Hope\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/newhopecorp.org\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es-MX\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/newhopecorp.org\\\/#organization\",\"name\":\"New Hope C.O.R.P.S., Inc.\",\"alternateName\":\"New Hope CORP\",\"url\":\"https:\\\/\\\/newhopecorp.org\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es-MX\",\"@id\":\"https:\\\/\\\/newhopecorp.org\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/newhopecorp.org\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/logo-9.30.22.png\",\"contentUrl\":\"https:\\\/\\\/newhopecorp.org\\\/wp-content\\\/uploads\\\/2023\\\/02\\\/logo-9.30.22.png\",\"width\":2330,\"height\":649,\"caption\":\"New Hope C.O.R.P.S., Inc.\"},\"image\":{\"@id\":\"https:\\\/\\\/newhopecorp.org\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/corpshope\",\"https:\\\/\\\/www.reddit.com\\\/user\\\/NewHopeCORPS\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Protecci\u00f3n de privacidad","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newhopecorp.org\/es\/privacy-protections\/","og_locale":"es_MX","og_type":"article","og_title":"[:en]Privacy Protections[:es]Protecci\u00f3n de privacidad[:fr]Protection de la vie priv\u00e9e[:]","og_description":"New Hope CORPS HIPAA Política de privacidad  Fecha de revisión: 29 de abril de 2024  Designation of Privacy and Contact Officials Definición  Información sobre la salud protegida (PHI): Cualquier información individual identificable relacionada con la salud de una persona o la del proveedor de atención médica de una persona que pueda utilizarse para identificar a…","og_url":"https:\/\/newhopecorp.org\/es\/privacy-protections\/","og_site_name":"New Hope CORPS","article_modified_time":"2026-09-17T15:04:40+00:00","twitter_card":"summary_large_image","twitter_site":"@corpshope","twitter_misc":{"Tiempo de lectura":"16 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/newhopecorp.org\/privacy-protections\/","url":"https:\/\/newhopecorp.org\/privacy-protections\/","name":"Protecci\u00f3n de privacidad","isPartOf":{"@id":"https:\/\/newhopecorp.org\/#website"},"datePublished":"2024-05-15T14:07:16+00:00","dateModified":"2026-09-17T15:04:40+00:00","breadcrumb":{"@id":"https:\/\/newhopecorp.org\/privacy-protections\/#breadcrumb"},"inLanguage":"es-MX","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newhopecorp.org\/privacy-protections\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/newhopecorp.org\/privacy-protections\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newhopecorp.org\/"},{"@type":"ListItem","position":2,"name":"Privacy Protections"}]},{"@type":"WebSite","@id":"https:\/\/newhopecorp.org\/#website","url":"https:\/\/newhopecorp.org\/","name":"New Hope CORPS","description":"Meeting your behavioral healthcare needs since 1993","publisher":{"@id":"https:\/\/newhopecorp.org\/#organization"},"alternateName":"New Hope","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newhopecorp.org\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es-MX"},{"@type":"Organization","@id":"https:\/\/newhopecorp.org\/#organization","name":"New Hope C.O.R.P.S., Inc.","alternateName":"New Hope CORP","url":"https:\/\/newhopecorp.org\/","logo":{"@type":"ImageObject","inLanguage":"es-MX","@id":"https:\/\/newhopecorp.org\/#\/schema\/logo\/image\/","url":"https:\/\/newhopecorp.org\/wp-content\/uploads\/2023\/02\/logo-9.30.22.png","contentUrl":"https:\/\/newhopecorp.org\/wp-content\/uploads\/2023\/02\/logo-9.30.22.png","width":2330,"height":649,"caption":"New Hope C.O.R.P.S., Inc."},"image":{"@id":"https:\/\/newhopecorp.org\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/corpshope","https:\/\/www.reddit.com\/user\/NewHopeCORPS"]}]}},"_links":{"self":[{"href":"https:\/\/newhopecorp.org\/es\/wp-json\/wp\/v2\/pages\/690","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newhopecorp.org\/es\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/newhopecorp.org\/es\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/newhopecorp.org\/es\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/newhopecorp.org\/es\/wp-json\/wp\/v2\/comments?post=690"}],"version-history":[{"count":7,"href":"https:\/\/newhopecorp.org\/es\/wp-json\/wp\/v2\/pages\/690\/revisions"}],"predecessor-version":[{"id":1133,"href":"https:\/\/newhopecorp.org\/es\/wp-json\/wp\/v2\/pages\/690\/revisions\/1133"}],"wp:attachment":[{"href":"https:\/\/newhopecorp.org\/es\/wp-json\/wp\/v2\/media?parent=690"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}