HIPAA Compliance

1. Our Commitment

The Health Insurance Portability and Accountability Act (HIPAA) sets national standards for protecting sensitive patient health information. FloridaESALetter.org and the licensed clinicians on our platform maintain administrative, technical, and physical safeguards designed to protect your protected health information (PHI) consistent with HIPAA's Privacy and Security Rules.

2. How Your PHI Is Protected

• Encrypted telehealth: evaluations take place over secure, encrypted video platforms designed for healthcare use.
• Encryption in transit and at rest: intake data and letters are transmitted over TLS and stored with industry-standard encryption.
• Access controls: only your evaluating clinician and the minimum necessary support staff can access your records, under role-based permissions and audit logging.
• Business Associate Agreements (BAAs): vendors that handle PHI on our behalf — video, scheduling, and storage providers — sign BAAs committing them to HIPAA-level safeguards.
• Workforce training: team members complete privacy and security training and follow strict confidentiality policies.

3. How Your PHI May Be Used

Your health information is used only for treatment (your evaluation), payment, and health care operations, or as you explicitly authorize — for example, when you ask us to verify your letter to a landlord. We never sell PHI, and we never share it for marketing.

4. Landlord & Airline Verification

Verification responses confirm only what is necessary: that a letter is authentic and was issued by a licensed clinician. We do not disclose your diagnosis or clinical details to landlords, property managers, or airlines without your written authorization.

5. Your HIPAA Rights

• Access and receive a copy of your records
• Request corrections to your records
• Request restrictions on certain uses and disclosures
• Receive an accounting of disclosures
• File a complaint without retaliation — with us, or with the U.S. Department of Health & Human Services Office for Civil Rights

6. Reporting a Concern

To exercise your rights or report a privacy concern, contact our privacy team at care@floridaesaletter.org with "Privacy Request" in the subject line. We respond to verified requests within 30 days.