Get started
Healthcare · Example details

Review a reminder vendor

Willow Care Network · Fictional company and project. Prepared drafts for human review.

Company · From the example

Willow Care Network

Industry
Healthcare
Offering
Outpatient care and appointment coordination
Customers
Clinic patients
Geography
United States

A fictional company for this example.

Project · From the example

Contact-only reminders

Willow Care Network wants to use a new vendor for appointment reminders at its U.S. clinics. The pilot supplies patient name, telephone number and appointment time. Messages contain no diagnosis or treatment details. The vendor contract, retention and access controls have not been reviewed. No actual patient information is included.

Example document

Reminder vendor controls · fictional internal excerpt

H1. Before onboarding a reminder vendor, map each data field, recipient, purpose, retention period and access role. Review permitted use and contract safeguards with the privacy lead. H2. The contact-only pilot permits name, telephone number and appointment time. Adding diagnosis, treatment or other clinical content requires a new privacy and clinical review before any transfer. These are fictional internal controls, not a statement of HIPAA applicability.

Fictional internal controls included for this example. They are not your company’s policy.

See the assessment →