TEXT MESSAGING PRIVACY POLICY
Introduction
This Text Messaging Privacy Policy describes how CDI Management Corp. d/b/a RAYUS Radiology and Center for Diagnostic Imaging, Inc. d/b/a RAYUS Radiology (collectively “RAYUS”) and their affiliated and/or managed entities collect, use, disclose, retain, and protect information associated with appointment reminders, appointment confirmations, scheduling communications, patient service communications, and related healthcare operational text messages.
Information We Collect
We may collect mobile telephone numbers, patient names, communication preferences, consent records, appointment information, message content and responses, delivery status information, and identifiers necessary to administer the texting program.
How We Use Information
Information is used to send appointment reminders, appointment details, patient care communications, scheduling updates, operational notifications, maintain consent records, improve communications, and support treatment, payment, and healthcare operations.
HIPAA and Healthcare Communications
RAYUS maintains reasonable administrative, technical, and physical safeguards. Text messages may not be encrypted and may present privacy risks; RAYUS limits content to the minimum necessary information.
Mobile Information and SMS Consent
Mobile information and opt-in consent will not be shared with third parties or affiliates for marketing or promotional purposes. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
Business Associates and Vendors
Information may be shared with messaging vendors, technology providers, service providers, and business associates solely to provide services on behalf of RAYUS and subject to contractual confidentiality and security obligations.
TCPA, CTIA, and A2P 10DLC Compliance
Patients provide express consent before receiving recurring text messages. Message frequency varies. Message and data rates may apply. STOP opt-out and HELP assistance commands are supported. Consent records are maintained to demonstrate compliance with carrier and regulatory requirements.
Consent Record Retention
RAYUS retains text messaging consent records, enrollment records, opt-out records, and related program administration records in accordance with applicable legal, regulatory, and operational requirements.
California Privacy Rights
RAYUS does not sell personal information and does not share SMS consent information for advertising purposes. Certain California privacy rights may apply to non-exempt personal information. HIPAA protected health information is generally exempt from the CCPA/CPRA.
Washington My Health My Data Act
To the extent consumer health data covered by Washington law is collected outside HIPAA exemptions, RAYUS will provide required notices and honor applicable rights regarding access, deletion, withdrawal of consent, and data practices.
Nevada Consumer Health Data Law
To the extent Nevada consumer health data requirements apply to information not otherwise exempt under healthcare privacy laws, RAYUS will comply with applicable notice, authorization, and consumer rights requirements.
Other State Privacy Laws
Residents of states providing privacy rights may have rights with respect to certain categories of non-exempt personal information. Applicable healthcare and HIPAA exemptions remain in effect.
Security
RAYUS employs measures designed to protect personal information and protected health information against unauthorized access, use, alteration, disclosure, or destruction.
Retention
Information is retained as necessary to provide services, meet legal obligations, support healthcare operations, and resolve disputes.
Notice of Privacy Practices
This Policy supplements the RAYUS Notice of Privacy Practices and website Privacy Policy. In the event of a conflict regarding protected health information, applicable law and the Notice of Privacy Practices will control.
Opt-Out Rights
Patients may opt out by replying STOP. After opting out, no further automated text messages will be sent unless the patient re-enrolls. HELP may be used for assistance.
Contact Information
RAYUS Radiology Privacy Officer
5775 Wayzata Blvd., Ste. 400, St. Louis Park, MN 55416
(855) 377-1624