Compliance
Privacy and Security Notice
Pagelopolus Endocrinology uses a security-first approach for all patient communications. Protected health information should be exchanged only through HIPAA-configured systems approved by the clinic.
What Not to Send Through Public Web Forms
- Diagnosis names or treatment details
- Lab reports or imaging files
- Medication lists and dosage changes
- Insurance IDs, SSNs, and payment card details
Use These Channels Instead
- HIPAA-configured patient portal messaging
- Secure document upload in approved intake system
- Clinic phone workflow for appointment logistics
- On-site completion of sensitive documents when needed
Technical Safeguards for This Site
- No PHI fields in public forms by default
- Public pages limited to resources, instructions, and routing
- All PHI workflows moved to systems with signed BAAs and role-based access control
- Tracking scripts reviewed to prevent PHI disclosure in URLs or events