HIPAA Omnibus Notice of Privacy Practices
This Notice of Privacy Practices is NOT an authorization. It describes how we, our Business Associates, and their subcontractors may use and disclose your Protected Health Information to carry out treatment, payment, or health care operations, and for other purposes that are permitted or required by law. It also describes your rights to access and control your Protected Health Information. “Protected Health Information” is information that identifies you individually, including demographic information that relates your past, present, or future physical or mental health condition and related health care services.
USES AND DISCLOSURES OF YOUR PROTECTED HEALTH INFORMATION
We may use and disclose your Protected Health Information in the following situations:
- Treatment: We may use or disclose your Protected Health Information to provide medical treatment and/or services in order to manage and coordinate your medical care. For example, we may share your medical information with other physicians and health care providers, DME vendors, surgery centers, hospitals, rehabilitation therapists, home health providers, laboratories, nurse case managers, worker’s compensation adjusters, etc. to ensure that the medical provider has the necessary medical information to diagnose and provide treatment to you.
- Payment: Your Protected Health Information will be used to obtain payment for your health care services. For example, we will provide your health care plan with the information it requires prior to paying us for the services we have provided to you. This use and disclosure may also include certain activities that your health plan requires prior to approving a service, such as determining benefits eligibility and prior authorization, etc.
- Minors: Protected Health Information of minors will be disclosed to their parents or legal guardians, unless prohibited by law.
- Required by Law: We will use or disclose your Protected Health Information when required to do so by local, state, federal, and international law.
- Abuse, Neglect, and Domestic Violence: Your Protected Health Information will be disclosed to the appropriate government agency if there is belief that a patient has been or is currently the victim of abuse, neglect, or domestic violence and the patient agrees or it is required by law to do so. In addition, your information may also be disclosed when necessary to prevent a serious threat to your health or safety or the health and safety of others to someone who may be able to help prevent the threat.
- Public Health: Your Protected Health Information may be disclosed and may be required by law to be disclosed for public health risks. This includes: reports to the Food and Drug Administration (FDA) for the purpose of quality and safety of an FDA-regulated product or activity; to prevent or control disease; report births and deaths; report child abuse and/or neglect; reporting of reactions to medications or problems with health products; notification of recalls of products; reporting a person who may have been exposed to a disease or may be at risk of contracting and/or spreading a disease or condition.
- Breach Notification Purposes: If for any reason there is an unsecured breach of your Protected Health Information, we will utilize the contact information you have provided us with to notify you of the breach, as required by law. In addition, your Protected Health Information may be disclosed as a part of the breach notification and reporting process.
- Business Associates: We may disclose your Protected Health Information to our business associates who provide us with services necessary to operate and function as a medical practice. We will only provide the minimum information necessary for the associate(s) to perform their functions as it relates to our business operations. For example, we may use a separate company to process our billing or transcription services that require access to a limited amount of your health information. Please know and understand that all of our business associates are obligated to comply with the same HIPAA privacy and security rules in which we are obligated. Additionally, all of our business associates are under contract with us and committed to protect the privacy and security of your Protected Health Information.
USES AND DISCLOSURES IN WHICH YOU HAVE THE RIGHT TO OBJECT AND OPT OUT
- Communication with family and/or individuals involved in your care or payment of your care: Unless you object, disclosure of your Protected Health Information may be made to a family member, friend, or other individual involved in your care or payment of your care in which you have identified.
- Disaster: In the event of a disaster, your Protected Health Information may be disclosed to disaster relief organizations to coordinate your care and/or to notify family members or friends of your location and condition. Whenever possible, we will provide you with an opportunity to agree or object.
PROTECTED HEALTH INFORMATION AND YOUR RIGHTS
The following are statements of your rights, subject to certain limitations, with respect to your Protected Health Information:
- You have the right to inspect and copy your Protected Health Information (reasonable fees may apply): Pursuant to your written request, you have the right to inspect and copy your Protected Health Information in paper or electronic format. Under federal law, you may not inspect or copy the following types of records: psychotherapy notes, information compiled as it relates to civil, criminal, or administrative action or proceeding; information restricted by law; information related to medical research in which you have agreed to participate; information obtained under a promise of confidentiality; and information whose disclosure may result in harm or injury to yourself or others. We have up to 30 days to provide the Protected Health Information and may charge a fee for the associated costs.
- You have a right to a summary or explanation of your Protected Health Information: You have the right to request only a summary of your Protected Health Information if you do not desire to obtain a copy of your entire record. You also have the option to request an explanation of the information when you request your entire record.
- You have the right to obtain an electronic copy of medical records: You have the right to request an electronic copy of your medical record for yourself or to be sent to another individual or organization when your Protected Health Information is maintained in an electronic format. We will make every attempt to provide the records in the format you request; however, in the case that the information is not readily accessible or producible in the format you request, we will provide the record in a standard electronic format or a legible hard copy form. Record requests may be subject to a reasonable, cost-based fee for the work required in transmitting the electronic medical records.
- You have the right to receive a notice of breach: In the event of a breach of your unsecured Protected Health Information, you have the right to be notified of such breach.
- You have the right to request Amendments: At any time if you believe the Protected Health Information we have on file for you is inaccurate or incomplete, you may request that we amend the information. Your request for an amendment must be submitted in writing and detail what information is inaccurate and why. Please note that a request for an amendment does not necessarily indicate the information will be amended.
- You have a right to receive an accounting of certain disclosures: You have the right to receive an accounting of disclosures of your Protected Health Information. An “accounting” being a list of the disclosures that we have made of your information. The request can be made for paper and/or electronic disclosures and will not include disclosures made for the purposes of: treatment; payment; health care operations; notification and communication with family and/or friends; and those required by law.
- You have the right to request restrictions of your Protected Health Information: You have a right to restrict and/or limit the information we disclose to others, such as family members, friends, and individuals involved in your care or payment for your care. You also have the right to limit or restrict the information we use or disclose for treatment, payment, and/or health care operations. Your request must be submitted in writing and include the specific restriction requested, whom you want the restriction to apply, and why you would like to impose the restriction. Please note that our practice/your physician is not required to agree to your request for restriction with the exception of a restriction requested to not disclose information to your health plan for care and services in which you have paid in full out-of-pocket.
- You have a right to request to receive confidential communications: You have a right to request confidential communications from us by alternative means or at an alternative location. For example, you may designate we send mail only to an address specified by you which may or may not be your home address. You may indicate we should only call you on your work phone or specify which telephone numbers we are allowed or not allowed to leave messages on. You do not have to disclose the reason for your request; however, you must submit a request with specific instructions in writing.
- You have a right to receive a paper copy of this notice: Even if you have agreed to receive an electronic copy of this Privacy Notice, you have the right to request we provide it in paper form. You may make such a request at any time.
CHANGES TO THIS NOTICE
We reserve the right to change the terms of this notice and will notify you of such changes. We will also make copies available of our new notice if you wish to obtain one. We will not retaliate against you for filing a complaint.
COMPLAINTS
If at any time you believe your privacy rights have been violated and you would like to register a complaint, you may do so with us or with the Secretary of the United States Department of Health and Human Services.
If you wish to file a complaint with us, please submit it in writing to our Privacy/Compliance Officer to the address listed on the first page of this Notice.
If you wish to file a complaint with the Secretary of the United States Department of Health and Human Services, please go to the website of the Office for Civil Rights (www.hhs.gov/ocr/hipaa/), call 202-619-0257 (toll free 877-696-6775), or mail to:
Secretary of the US – Department of Health and Human Services
200 Independence Ave S.W.
Washington, D.C. 20201
We are required by law to provide individuals with this notice of our legal responsibilities and privacy practices with respect to Protected Health Information. We are also required to maintain the privacy of, and abide by the terms of the notice currently in effect. If you have any questions in reference to this form, please contact us in person or by phone.
OPEN PAYMENT DATABASE
The Open Payments database is a federal tool used to search payments made by drug and device companies to physicians and teaching hospitals. It can be found at https://openpaymentsdata.
For informational purposes only, a link to the federal Centers for Medicare and Medicaid Services (CMS) Open Payments web page is provided here. The federal Physician Payments Sunshine Act requires that detailed information about payment and other payments of value worth over ten dollars ($10) from manufacturers of drugs, medical devices, and biologics to physicians and teaching hospitals be made available to the public.