Effective Date: September 1, 2013
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
We are required by law to protect the privacy of health information that may reveal your identity, and to provide you with a copy of this notice, which describes the health information privacy practices of the Department of Human Services (DHS), its’ staff and affiliated health care providers who jointly perform health care related services with medical groups, including physicians and physician groups. You will be able to obtain your own copies of our current notice by accessing our website at www.dhs.ri.gov or calling the Privacy Officer at 401-462-1879 or writing to Ralph Racca, Privacy Officer, 74 West Road, Hazard Building, Cranston, Rhode Island 02920.
If you have any questions about this notice or would like further information, please contact the above referenced Privacy Officer.
WHAT HEALTH INFORMATION IS PROTECTED
We are committed to protecting the privacy of information we gather about you while providing health-related services. Some examples of protected health information include information indicating that you are a patient of a medical group or receiving health-related services from a facilities, information about your health condition, genetic information, or information about your health care benefits under Medicare, Medicaid and/or an insurance plan, each when combined with identifying information, such as your name, address, social security number or phone number.
REQUIRED DISCLOSURES OF YOUR PROTECTED HEALTH INFORMATION
In certain circumstances, we are required to disclose your protected health information.
Disclosures to You. We are required to disclose your protected health information to you, or your personal representative upon your request. A personal representative is an individual who has been designated by you and who has qualified for such designation in accordance with relevant law (and provides adequate documentation).
Disclosures to HHS. We are required to disclose your protected health information to the U.S. Department of Health and Human Services to determine our compliance with the Health Insurance Portability and Accountability Act (HIPAA), a federal privacy law.
HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION WITHOUT YOUR WRITTEN AUTHORIZATION
There are some situations when we do not need your written authorization before using your health information or disclosing it to others, including:1. Treatment, Payment and Health Care Operations.
Treatment. We may disclose your protected health information to a health care provider, or to an individual who manages or coordinates the provision of health care, for purposes of providing you treatment.
Payment. We may use your health information or disclose it to others so that we may obtain payment for your health care services. For example, we may disclose information about you to your health insurance company or any third party liability insurance company in order to obtain reimbursement after we have treated you. In some cases, we may disclose information about you to your health insurance company to determine whether it will cover your treatment.
Health Care Operations.We may use your health information or disclose it to others in order to conduct our business operations. For example, we may use your health information to evaluate the performance of our staff in servicing you, or to educate our staff on how to improve the services they provide for you.
2. Appointment Reminders, Treatment Alternatives, Benefits and Services. In the course of providing health care related services to you, we may use your health information to contact you with a reminder that you have an appointment or need to contact DHS for health-related benefits and services that may be of interest or concern to you.
3. Business Associates. We may disclose your healthinformation to contractors, agents and other “business associates” who need the information in order to assist us with obtaining payment or carrying out our business operations. For example, we may disclose your health information to a billing company that helps us to obtain payment from your insurance company, or we may disclose your health information to an accounting firm or law firm that provides professional advice to us. If we do disclose your health information to a business associate, we will have a written contract to ensure that our business associate also protects the privacy of your health information. If our business associate discloses your health information to a subcontractor or vendor, the business associate is required to have a written contract to ensure that the subcontractor or vendor also protects the privacy of the information.
4. Friends and Family Designated to be Involved In Your Care. If you do not object, we may disclose your health information to a family member, relative, or close personal friend who is involved in your care or payment for your care, including following your death. We may reasonably infer from the circumstances that you would not object to the disclosure.
5. Proof of Immunization. We may disclose proof a child’s immunization to a school, about a child who is a student or prospective student of the school, as required by State or other law, if a parent, guardian, other person acting in loco parentis, or an emancipated minor, authorizes us to do so, but we do not need written authorization.
6. Public Need.
As Required By Law. We may use or disclose your health information if we are required by law to do so, and we will notify you of these uses and disclosures if notice is required by law.
Public Health Activities. We may disclose your health information to authorized public health officials (or a foreign government agency collaborating with such officials) so they may carry out their public health activities under law, such as controlling disease or public health hazards. We may also disclose your health information to a person who may have been exposed to a communicable disease or be at risk for contracting or spreading the disease if permitted by law. We may disclose a child’s proof of immunization to a school, if required by State or other law, if we obtain and document the agreement for disclosure from the parent, guardian, person acting in loco parentis, an emancipated minor or an adult.
Victims Of Abuse, Neglect Or Domestic Violence. We may release your health information to a public health authority authorized to receive reports of abuse, neglect or domestic violence.
Health Oversight Activities. We may release your health information to government agencies authorized to conduct audits, investigations, and inspections. These government agencies monitor the operation of the health care system, government benefit programs such as Medicare and Medicaid, and compliance with government regulatory programs and civil rights laws.
Lawsuits And Disputes. We may disclose your health information if we are ordered to do so by a court or administrative tribunal that is handling a lawsuit or other dispute. We may also disclose your information in response to a subpoena, discovery request, or other lawful request by someone else involved in the dispute, but only if required judicial or other approval or necessary authorization is obtained.
Law Enforcement. We may disclose your health information to law enforcement officials for certain reasons, such as complying with court orders, assisting in the identification of fugitives or the location of missing persons, if we suspect that your death resulted from a crime, or if necessary, to report a crime that occurred on our property or off-site in a medical emergency.
To Avert A Serious And Imminent Threat To Health Or Safety. We may use your health information or disclose it to others when necessary to prevent a serious and imminent threat to your health or safety, or the health or safety of another person or the public. In such cases, we will disclose your information only to someone able to help prevent the threat. We may also disclose your health information to law enforcement officers if you tell us that you participated in a violent crime that may have caused serious physical harm to another person (unless you admitted that fact while in counseling), or if we determine that you escaped from lawful custody (such as a prison or mental health institution).
National Security And Intelligence Activities Or Protective Services. We may disclose your health information to authorized federal officials who are conducting national security and intelligence activities or providing protective services to the President or other important officials.
Military And Veterans. If you are in the Armed Forces, we may disclose health information about you to appropriate military command authorities for activities they deem necessary to carry out their military mission. We may also release health information about foreign military personnel to the appropriate foreign military authority.
Inmates And Correctional Institutions. If you are an inmate or you are detained by a law enforcement officer, we may disclose
your health information to the prison officers or law enforcement officers if necessary to provide you with health care, or to maintain safety, security and good order at the place where you are confined. This includes sharing information that is necessary to protect the health and safety of other inmates or persons involved in supervising or transporting inmates.
Workers’ Compensation. We may disclose your health information for workers’ compensation or similar programs that provide benefits for work-related injuries.
Coroners, Medical Examiners And Funeral Directors. In the event of your death, we may disclose your health information to a coroner or medical examiner. We may also release this information to funeral directors as necessary to carry out their duties.
Organ And Tissue Donation. In the event of your death or impending death, we may disclose your health information to organizations that procure or store organs, eyes or other tissues so that these organizations may investigate whether donation or transplantation is possible under applicable laws.
Research. Under limited circumstances, we may disclose your protected health information for medical research purposes.
7. De-identified Information Or Information That Constitutes a Limited Data Set. We may use and disclose your health information if we have removed any information that has the potential to identify you so that the health information is “de-identified.” We may also use and disclose health information about you that is constitutes a “limited data set” if the person who will receive the information signs an agreement to protect the privacy of the information as required by federal and state law. A limited data set will not contain any information that would directly identify you (such as your name, street address, social security number, phone number, fax number, electronic mail address, website address, or license number).
8. Incidental Disclosures. While we will take reasonablesteps to safeguard the privacy of your health information, certain disclosures of your health information may occur during or as an unavoidable result of our otherwise permissible uses or disclosures of your health information. For example, during the course of an appointment, other patients or clients in the area may see, or overhear discussion of, your health information.
9. Changes to this Notice. We reserve the right to changethis notice at any time and to make the revised or changed notice effective in the future. We will make the revised notice available on our website and notify you of any material changes to the notice.
REQUIREMENT FOR WRITTEN AUTHORIZATIONFor purposes other than those described above, generally, we will obtain your written authorization before using your health information or disclosing it to others outside of DHS. There are certain situations where we must obtain your written authorization before using your health information or disclosing it, including:
Marketing. Unless we obtain your authorization, we may not disclose any of your health information for marketing purposes if DHS will receive direct or indirect financial renumeration not reasonably related to our cost of making the communication.
Sale of Protected Health Information. Unless we obtain your authorization, we will not sell your protected health information to third parties. The sale of protected health information, however, does not include a disclosure for public health purposes, for research purposes where we will receive remuneration only for our costs to prepare and transmit the health information, for treatment and payment purposes, for the sale, transfer, merger or consolidation of all or part of our operations, to a business associate or its subcontractor to perform health care functions on our behalf, or for other purposes as required by law.
Psychotherapy Notes. Unless we obtain your authorization, we will not disclose information contained in psychotherapy notes (which we rarely, if ever, maintain).
If you provide us with written authorization, for the above or any other disclosures, you may revoke that written authorization at any time, except to the extent that we have already relied upon it. To revoke a written authorization, please write to the Privacy Officer at the address given above. You may also initiate the transfer of your records to another person by completing a written authorization form.
YOUR RIGHTS TO ACCESS AND CONTROL YOUR HEALTH INFORMATION
You have the following rights to access and control your health information:
1. Right To Inspect And Copy Records. You have the right to inspect and obtain a copy of any of your health information that may be used to make decisions about you and your treatment for as long as we maintain this information in our records, including medical and billing records. To inspect or obtain a copy of your health information, please submit your request in writing to the Privacy Officer at the address given above. If you request a copy of the information, we may charge a reasonable fee for the costs of copying, mailing or other supplies we use to fulfill your request. If your protected health information is maintained in an electronic health record, then you may receive a copy of this information in electronic format.
2. Right To Amend Records. If you believe that thehealth information we have about you is incorrect or incomplete, you may ask us to amend the information for as long as the information is kept in our records by writing to the Privacy Officer at the address given above. Your request should include the reasons why you think we should make the amendment. If we deny part or your entire request, we will provide a written notice that explains our reasons for doing so. You will have the right to have certain information related to your requested amendment included in your records.
3. Right To An Accounting Of Disclosures. You have aright to request an “accounting of disclosures,” which is a list with information about how we have disclosed your health information to others within the past 6 years. We are not required to provide you with accounting of disclosures (1) for purposes of treatment, payment, or health care operations, (2) made to you or yourpersonal representative, (3) made pursuant to your authorization, (4) made to family involved in your care in the presence of an emergency, (5) for national security or intelligence purposes, and (6) as part of a limited data set. To obtain a request form for an accounting of disclosures, please write to the Privacy Officer at the address given above. You have a right to receive one list every 12-month period for free. However, we may charge you for the cost of providing any additional lists in that same 12-month period.
4. Right To Receive Notification Of A Breach. You have the right to be notified if there is a compromise of your unsecured
protected health information within sixty (60) days of the discovery of the breach. The notice will include a description of what happened, including the date, the type of information involved in the breach, steps you should take to protect yourself from potential harm, a brief description of the investigation into the breach, mitigation of harm to you and protection against further breaches and contact procedures to answer your questions.
5. Right To Request Restrictions. You have the right to request that we further restrict the way we use and disclose your health information to treat your condition, collect payment for that treatment, run our normal business operations or disclose information about you to family or friends involved in your care.
The request for restriction will only be applicable to that particular service. You will have to request a restriction for each service thereafter. To request restrictions, please write to the Privacy Officer at the address given above. We are not required to agree to your request for a restriction, and in some cases the restriction you request may not be permitted under law. However, if we do agree, we will be bound by our agreement unless the information is needed to provide you with emergency treatment or comply with the law. Once we have agreed to a restriction, you have the right to revoke the restriction at any time. Under some circumstances, we will also have the right to revoke the restriction as long as we notify you before doing so.
6. Right To Request Confidential Communications. You have the right to request that communications of your protected health information be sent to you at another location or by alternative means if you indicate that disclosure by the regular means could pose a danger to you and specify a reasonable alternative address or method of contact. For example, you may request we call you at work instead of sending information to your home. We will accommodate all reasonable requests.
7. Right To Have Someone Act On Your Behalf. You have the right to name a personal representative who may act on your behalf to control the privacy of your health information. Parents and guardians will generally have the right to control the privacy of health information about minors unless the minors are permitted by law to act on their own behalf. We may elect not to treat the person as your personal representative if there is a reasonable belief that you have been, or may be; subjected to abuse, violence, or neglect by such person or that treating such person as your personal representative could endanger you. Furthermore, we may determine, in the exercise of professional judgment, that it is not in your best interest to treat the person as your personal representative.
8. Right To Obtain A Copy Of Notices. If you are receiving this notice electronically, you have the right to a paper copy of this notice.
9. Right To File A Complaint. If you believe your privacy rights have been violated, you may file a complaint with us by calling the Privacy Officer at 401-462-1879 or writing to Ralph Racca, Privacy Officer, 74 West Road, Hazard Building, Cranston, Rhode Island 02920 or with the Secretary of the Department of Health and Human Services. We will not withhold services or take action against you for filing a complaint.
10. Use and Disclosures Where Special Protections May Apply. Some kinds of information, such as HIV-related information, alcohol and substance abuse treatment information, mental health information, and genetic information, are considered so sensitive that state or federal laws provide special protections for them. For example, we are prohibited from using your genetic information for underwriting purposes. Therefore, some parts of this general Notice of Privacy Practices may not apply to these types of information. If you have questions or concerns about the ways these types of information may be used or disclosed, please speak with your health care provider.
Patient Plate – Hospital Use Only
Medical Record Number: ____________________
By signing below, I acknowledge that I have been provided a copy of this Notice of Privacy Practices and have therefore been advised of how health information about me may be used and disclosed by the Department of Human Services.
Signature of Patient or Personal Representative
Print Name of Patient or Personal Representative
Description of Personal Representative’s Authority