Privacy Policy
Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THAT INFORMATION. PLEASE REVIEW THIS NOTICE CAREFULLY.
In accordance with the Health Insurance Portability and Accountability Act of 1996 and regulations promulgated thereunder, commonly known as HIPAA and federal Privacy Rule, 45 CFR parts 160 and 164 (the “Privacy Rule”) and applicable state law, the Practice is committed to maintaining the privacy of your protected health information (“PHI”). PHI includes information about your health condition and the care and treatment you receive from the Practice and is often referred to as your health care or medical record. This Notice explains how your PHI may be used and disclosed to third parties. This Notice also details your rights regarding your PHI.
Your Protected Health Information
We collect protected health information from you through treatment, payment and related healthcare operations, the application and enrollment process, and/or healthcare providers or health plans, or through other means, as applicable. Your protected health information that is protected by law broadly includes any past, present and future healthcare information. Your protected health information includes any information that is created or received through oral, written or electronic communications by certain health care entities, including health care providers, such as physicians and hospitals, as well as, health insurance companies or plans. The law specifically protects health information that contains data consisting of eighteen (18) identifiers described in the HIPAA Privacy Rule including but not limited to your name, address, social security number, date of birth and others that could be used to identify you as the individual patient who is associated with that health information.
All Other Situations, With Your Specific Authorization
Except as otherwise permitted or required, as described above, we may not use or disclose your protected health information without your written authorization. Further, we are required to use or disclose your protected health information consistent with the terms of your authorization. You may revoke your authorization, in writing, the use or disclosure of any protected health information at any time, except to the extent that we have taken action in reliance on such authorization, or, if you provided the authorization as a condition of obtaining insurance coverage, other law provides the insurer with the right to contest a claim under the policy.
Your Rights With Respect to Your Protected Health Information
Under HIPAA, you have certain rights with respect to your protected health information. The following is a brief overview of your rights and our duties with respect to enforcing those rights.
- (a) Revoke any Authorization or consent you have given to the Practice, at any time. To request a revocation, you must submit a written request to the Practice’s Privacy Officer.
- (b) Request special restrictions – on certain uses and disclosures of your PHI as authorized by law. In general, this relates to your right to request special restrictions concerning disclosures of your PHI regarding uses for treatment, payment and operational purposes under Privacy Rule, Section 164.522(a) and restrictions related to disclosures to your family and other individuals involved in your care under Privacy Rule, Section 164.510(b). Except in certain instances, the Practice may not be obligated to agree to any requested restrictions. To request restrictions, you must submit a written request to the Practice’s Privacy Officer. In your written request, you must inform the Practice of what information you want to limit, whether you want to limit the Practice’s use or disclosure, or both, and to whom you want the limits to apply. If the Practice agrees to your request, the Practice will comply with your request unless the information is needed in order to provide you with emergency treatment. We will not accept a request to restrict uses or disclosures that are otherwise required by law.
- (c) Right to Request Restriction on Disclosures to Health Plans for Services Paid for In Full at Time of Service – You have the right under the American Recovery and Reinvestment Act, Section 13405(a) to request the Practice to restrict disclosures of protected health information to a health plan for purposes of carrying out payment or healthcare operations if the protected health information pertains solely to a healthcare item or service for which the Practice has been paid out of pocket in full at time of service.
- (d) Receive confidential communications or PHI by alternative means or at alternative locations as provided by Privacy Rule Section 164.522(b). For instance, you may request all written communications to you marked “Confidential Protected Health Information.” You must make your request in writing to the Practice’s Privacy Officer. The Practice will accommodate all reasonable requests. We may condition the provision of confidential communications on you providing us with information as to the specification of an alternative address or other method of contact. We may require that a request contain a statement that disclosure of all or a part of the information to which the request pertains could endanger you. We may not require you to provide an explanation of the basis for your request as a condition of providing communications to you on a confidential basis. We must permit you to request and must accommodate reasonable requests by you to receive communications of protected health information from us by alternative means or at alternative locations.