HIPPA Privacy Notice

Health Insurance Portability & Accountability Act (HIPAA)

Notice of Privacy Practices

Effective Date: June 01, 2023

THIS NOTICE EXPLAINS HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED, AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

We value your privacy and are committed to maintaining the confidentiality of your medical information. Records of the medical care we provide and receive from others are securely kept. These records enable us to deliver quality medical care, facilitate payment for services, and fulfill our professional and legal obligations. By law, we must ensure the privacy of protected health information (PHI) and inform individuals about their rights and our privacy practices regarding PHI. This notice outlines the use and disclosure of your medical information, along with your rights and our legal responsibilities. If you have any questions about this notice, please contact our Privacy Officer at the number provided above.

How this Medical Practice May Use or Disclose Your Health Information

  1. Treatment: We may use or disclose your PHI to provide you with necessary medical care. This includes sharing information within our medical practice and with other healthcare providers involved in your treatment. For example, we may share your information with pharmacists or laboratories.
  2. Payment: We may use and disclose PHI to obtain payment for the services provided. This may involve sending PHI to your insurance company for billing purposes.
  3. Appointment Reminders: We may use the contact numbers you provide to make or confirm appointments. Our staff may leave messages with appointment information or requests to contact us, unless you specify otherwise. We may also reach out to discuss your treatment, alternatives, or other health-related benefits and services.
  4. Health Care Operations: We may use and disclose your PHI for the proper operation of this medical practice. This includes activities to review and improve the quality of care, assess the qualifications of our staff, engage in medical reviews, comply with legal obligations, and manage business operations. We may share PHI with our trusted “business associates” who provide administrative services and are bound by confidentiality agreements.
  5. Notification and Communication with Family: We may disclose PHI to family members, personal representatives, or individuals involved in your care. This includes information relevant to their involvement, your location, general condition, or death. In emergencies, we may disclose information to public service organizations. Our health professionals will exercise their best judgment in communicating with your family and others, seeking your agreement or objection whenever possible.
  6. Required by Law: We will use and disclose PHI as required by law, adhering to the relevant legal requirements. This may involve reporting abuse, responding to judicial or administrative proceedings, cooperating with law enforcement officials, or reporting information about deceased patients.
  7. Public Health: We may disclose PHI to public health authorities for activities such as disease prevention, injury control, and reporting abuse or reactions to medications.
  8. Health Oversight Activities: PHI may be disclosed to health oversight agencies for audits, investigations, inspections, licensure, and other proceedings, within the limits imposed by federal and California law.
  9. Judicial and Administrative Proceedings: In administrative or judicial proceedings, we may disclose PHI as authorized by court or administrative order, including responses to subpoenas and lawful processes.
  10. Law Enforcement: We may disclose PHI to law enforcement officials, as required or authorized by law, for purposes such as court orders, warrants, subpoenas, and law enforcement investigations.
  11. Public Safety/National Security/Protective Services: PHI may be disclosed to prevent serious threats to public health or safety, or for national security purposes, as authorized by law.
  12. Worker’s Compensation: PHI may be disclosed to comply with worker’s compensation laws.
  13. Minors: For unemancipated minors under California law, certain disclosures of health information may be made to parents, guardians, or individuals acting in loco parentis, in accordance with legal and ethical responsibilities.
  14. Sale of PHI: We are prohibited from disclosing PHI in exchange for direct or indirect remuneration without your prior authorization.
  15. Marketing: We require your authorization before using or disclosing your PHI for marketing communications that involve financial remuneration.
  16. With Authorization: Other uses and disclosures not described in this notice will only be made with your written authorization.

Please note that while HIPAA may not require your prior authorization for certain disclosures, under Alabama state law, we may not make those disclosures without your authorization or a written request from the requesting party, as governed by the applicable provisions of the Alabama Code. Additional limitations exist regarding the re-disclosure of records received from external providers in accordance with Alabama state regulations.

When This Medical Practice May Not Use or Disclose Your Health Information

  • Right to Request Special Privacy Protections: You can request restrictions on certain uses and disclosures of your health information. We reserve the right to accept or reject your request, except when you pay out-of-pocket for healthcare items or services and request non-notification to your health plan.
  • Right to Request Confidential Communications: You have the right to request receiving your health information in a specific way or at a specific location. We will comply with reasonable written requests that specify your preferred method of communication.
  • Right to Inspect and Copy: You have the right to inspect and copy your health information, with limited exceptions. A written request is required, and we may charge a reasonable fee in accordance with California law. Denials of requests will be provided in writing, including information about review processes.
  • Right to Amend or Supplement: You can request amendments to your health information if you believe it is incorrect or incomplete. Written requests must detail the specific changes and reasons. We are not required to make changes under certain circumstances, but we will provide information about the denial process.
  • Right to an Accounting of Disclosures: You have the right to receive an accounting of certain disclosures made by this medical practice within the last six years. Some disclosures are exempt. One accounting per 12-month period is allowed, with a possible fee for a second accounting.
  • Right to an Electronic Copy of Electronic Medical Records: If your PHI is stored electronically, you can request an electronic copy of your record in the format you specify, if readily producible. If not, a standard electronic format or readable hard copy will be provided, with a reasonable, cost-based fee for transmission.
  • Right to Get Notice of a Breach: You will be notified in the event of a breach of your unsecured PHI.
  • Paper Copy: You have the right to request a paper copy of this Notice of Privacy Practices, even if you agreed to receive it electronically.

This medical practice will not use or disclose PHI without your written authorization, except as outlined in this Notice of Privacy Practices. You can revoke your authorization in writing at any time.

Your Health Information Rights

For a detailed explanation of your rights or to exercise any of these rights, please contact our Privacy Officer using the provided phone number.

Changes to this Notice of Privacy Practices

We reserve the right to amend this notice in the future. Until then, we must comply with this version. After any amendment, the revised notice applies to all PHI maintained by us, regardless of when it was created or received. The current notice will be posted in our reception area and on our website.

Complaints

Please direct any complaints regarding this Notice of Privacy Practices or the handling of your health information to our Privacy Officer. Filing a complaint will not result in any penalty.

If you are not satisfied with our response, you may submit a formal complaint to:

Department of Health and Human Services
Office of Civil Rights
Hubert H. Humphrey Bldg.
200 Independence Avenue, S.W.
Room 509F HHH Building
Washington, DC  20201