SPF’s has two levels of protection built into its system. Here’s one scenario: Six months down the line, the patient says, “You asked me for all this personal and medical information, but you never advised me of my rights.” Until the patient clicks on “I Accept” at the end of the HIPAA document, the first screen they see, they cannot see or fill out any other forms. When the electronic forms are completed, they are digitally recorded with the Date, Time of day and IP addresses [computer the patient was using] at the bottom of page. Secondly, no personal information is sent in an email that could be intercepted (it is uploaded onto our secure website), so the practice is protected. HIPAA rules recommend that electronic transfers of personal health information and access to it are protected by encryption and authentication. SPF’s service meets those standards.