HIPAA Compliance

Clover Trials, Inc. is committed to maintaining the privacy and security of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act (HIPAA) and its implementing regulations.

HIPAA is a federal law that sets national standards for protecting sensitive patient health information. It requires safeguards to ensure the confidentiality, integrity and availability of PHI.

• Administrative safeguards: privacy and security officers, workforce training, and Business Associate Agreements with every vendor that touches PHI.
• Physical safeguards: data centers with controlled access and environmental protections.
• Technical safeguards: encryption in transit and at rest, role-based access, activity logging, automatic session timeouts and secure, tested backups.

• Access and receive a copy of your health information.
• Request corrections to inaccurate information.
• Receive an accounting of disclosures.
• Request restrictions on certain uses and disclosures.
• Request confidential communications.
• File a complaint without fear of retaliation.

• With your authorization: for example, when you apply to a clinical trial.
• For treatment: with the research site’s clinical team once you enroll.
• As required by law: in response to valid legal process.
• For public health activities permitted by law.

If a breach of unsecured PHI occurs, we will notify affected individuals without unreasonable delay and no later than 60 days after discovery, as required by law.

Email hipaa@clovertrials.com or write to Privacy Officer, Clover Trials, Inc., 548 Market Street, Suite 210, San Francisco, CA 94104.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr. We will not retaliate against you for filing a complaint.