HIPAA Disclosures

This page describes Louisiana Medical Tech Group's HIPAA compliance posture, breach history, and audit attestations.

---

Compliance attestations

• HIPAA Security Risk Assessment: complete (2025, third-party assessor: Coalfire Inc.)
• SOC 2 Type II: not currently scoped (in-house IT services)
• ONC-Certified EHR Modular: Orthanc 1.12.x for DICOM storage, Mirth Connect 4.4.x for HL7 integration
• Encryption: TLS 1.3 in transit; AES-256-GCM at rest

Breach history

Louisiana Medical Tech Group has had zero reportable breaches (incidents affecting 500+ individuals) since founding in 2009. We participate voluntarily in the HHS Office for Civil Rights "Wall of Shame" public registry as a baseline transparency commitment, even when our entry remains empty.

Business associates

Our active business associates as of 2026-Q2:

• Ochsner Imaging Center — referred imaging
• Quest Diagnostics — reference lab
• SureScripts — e-prescribing network
• Box Healthcare — secure document exchange
• Twilio — appointment reminder SMS (HIPAA BAA on file)

Right of access enforcement (HIPAA RoA)

Per OCR guidance, records requests under your right of access are honored at no cost for the first electronic copy. Subsequent copies: $6.50 flat-rate fee. Average fulfillment time: 9 days (target: ≤ 30).

Workforce training

100% of workforce members complete annual HIPAA training (KnowBe4 platform). Phishing simulation pass rate, 2025: 94%. Failed-simulation employees receive supplemental targeted training within 7 days.