CONCEPT: An organization is responsible for personal information under its control.

• Salumatics has designated a Chief Privacy Officer who is accountable for Salumatics's compliance with its privacy principles.
• Salumatics has developed an Information Protection Program that is designed to create awareness and understanding of the steps that Salumatics has taken to protect personal health information with which it has been entrusted.
• Salumatics includes a privacy protection clause in its contracts to ensure that its clients and any third parties, with whom it collaborates, provide comparable levels of information protection.
• Salumatics has implemented procedures to protect personal information.
• Salumatics has established procedures to receive and respond to inquiries and complaints.
• Salumatics has developed education sessions for staff (and other stakeholders) regarding the organization's information protection program.
• Salumatics has developed and will continue to develop corporate information to explain its policies and procedures.
• Salumatics will immediately terminate without notice any employee or subcontractor who inappropriately accesses or reveals personal information contained in health records/health data being processed for a client.