HIPAA Compliance & Health Information Protection

Our Commitment to Health Information Privacy

We understand that blood type and health-related information is sensitive. We are committed to protecting this information with the highest standards of security and privacy.

Protected Health Information (PHI)

The following information is treated as protected health information:

• Blood type and Rh factor
• Donation history
• Health eligibility status
• Any medical conditions disclosed

Security Measures

• All traffic to this site is encrypted in transit (HTTPS/TLS)
• Passwords are hashed and never stored in plain text
• Donor contact information is only released to a requester after they verify their email address with a one-time code
• Access to the admin dashboard requires authentication
• All access to donor contact information is logged, including who requested it, when, and for what stated purpose

This is a volunteer-run platform, not an enterprise health system. We don't claim a formal audit program, dedicated security staff, or a written incident-response plan beyond what's listed above — if that changes, this page will be updated to reflect it.

Minimum Necessary Standard

We follow the principle of minimum necessary disclosure. When sharing donor information with requesters, we only share what is necessary for the blood donation purpose. Full medical history is never shared.

Audit Trail

All access to protected health information is logged and monitored. This includes who accessed the information, when, and for what purpose. These logs are retained for compliance and security purposes.

Your Rights

• Right to access your health information
• Right to request corrections
• Right to know who has accessed your information
• Right to request restrictions on use
• Right to file a complaint

Contact Our Privacy Officer

For questions or concerns about health information privacy, contact our Privacy Officer at privacy@myblooddonorph.com.