HIPAA Policy

WHO WILL FOLLOW THE PRIVACY PRACTICES IN THIS NOTICE

We provide health care to our patients and residents together with physicians and other health care professionals. This Notice of Privacy Practices (“Notice”) describes how we will use and disclose medical information.

I. Our Commitment to Safeguard Your Protected Health Information.

Each time you visit our facility, a record of your visit is made. Information about you, including demographic information, that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services is called protected health information (“PHI”). Your medical record is a means of communication among the many health professionals who care for you. PHI may include documentation of your symptoms, examination, test results, diagnoses and treatment. It also includes documents related to billing and payment for care provided.

• We are committed to protecting the privacy of your protected health information. We are required by law to:
  Maintain the privacy of your medical information;
• Provide you with this Notice about our privacy practices that explains how, when, and why we use and disclose your protected health information;
  Abide by the terms of the current Notice;
• Make a good faith effort to obtain your written acknowledgment that you have received this Notice; and
• Notify you following a breach of your unsecured protected health information.

II. How we May Use and Disclose Your Protected Health Information

This Notice informs you about the ways in which we may use and disclose your protected health information. The following categories describe different ways that we use and disclose protected health information. For each category of uses or disclosures, we explain what we mean and give some examples to help you better understand the meaning. If a use or disclosure is not included in one of these categories, we will seek your permission first.

Uses and Disclosures without Your Permission

The following categories describe different ways that we are permitted to use and disclose your protected health information without your permission (which is called an “authorization” under HIPAA).

For Treatment

We may use and disclose your protected health information to provide you with medical treatment and services. We may disclose protected health information about you to doctors, nurses, technicians, medical students, and other healthcare personnel who provide you with healthcare services or are involved in taking care of you. This may include health care professionals at other facilities, such as your doctor’s office, other hospitals, nursing homes or home health agencies. For example, a doctor treating you for a broken leg may need to know if you have diabetes because diabetes may slow the healing process.

For Payment.

We may use and disclose your protected health information to obtain payment for your health care services provided by us. This may include certain activities that your health insurance plan may undertake before it approves or pays for the health care services we recommend for you such as making a determination of eligibility or coverage for insurance benefits, reviewing services provided to you for medical necessity, and undertaking utilization review activities.

For Health Care Operations.

We may use and disclose your protected health information for operations necessary for our facility to function and make sure our patients receive quality care. For example, we may use your protected health information in order to evaluate the quality of health care services that you received or to evaluate the performance of the health care professionals who provided health care services to you. This information may also be used in an effort to continually improve the quality and effectiveness of the health care and services we provide. We may disclose your protected health information to another health care provider or a health plan that you have a relationship with, for their operations’ activities.

Business Associates.

We may disclose your protected health information to other companies that help us. These business associates may include billing companies, claims processing companies, collection agencies, accountants, attorneys, consultants, and others that assist us with payment activities or health care operations. We contractually require our business associates to safeguard the privacy and security of your PHI.

Individuals Involved in Your Care or Payment for Your Care.

We may disclose protected health information about you to a family member, personal representative, or other person involved in your care or responsible for payment of your health care services. We may also discuss your condition with your family or friends and tell them that you are in the hospital. If you do not want us to share information with your family or others involved in your care, please contact the person listed in Section V of this Notice.

Public Health Authorities.

We may disclose your health information for public health activities and purposes to a public health authority that is permitted by law to collect or receive the information. For example, a disclosure may be made to a public health authority for the purpose of preventing or controlling disease. We may also disclose your protected health information to a person or company subject to the jurisdiction of the FDA to report adverse events, product defects or problems or biologic product deviations; to track FDA-regulated products; to enable product recalls; to make repairs or replacements; or for other purposes related to the quality, safety or effectiveness of a product or activity regulated by the FDA.

Public Safety.

We may disclose protected health information for public safety purposes in limited circumstances. We may disclose protected health information to law enforcement officials in response to a search warrant or a grand jury subpoena. We also may disclose protected health information to assist law enforcement officials in identifying or locating a person, to prosecute a crime of violence, to report deaths that may have resulted from criminal conduct, and to report criminal conduct at the facility. We also may disclose your protected health information to law enforcement officials and others to prevent a serious and imminent threat to health or safety.

Judicial and Administrative Proceedings.

We may disclose protected health information if we are ordered to do so by a court, for an administrative hearing, or if we receive a subpoena or a search warrant. You will receive advance notice about this disclosure in most situations so that you will have a chance to object to sharing your protected health information.

Fundraising Activities.

We may use your protected health information in an effort to raise funds for our facility with your consent. The money raised through these activities is used to expand and support the health care services and educational programs we provide to the community. If you do not wish to receive our fundraising communications, you may notify our Donor Relations Department and we will honor your wish. Future treatment or payment will not be a condition upon your decision regarding receipt of fundraising communications.

Disaster Relief Efforts.

As part of a disaster relief effort, we may disclose your protected health information to an agency assisting in the relief effort so that your family can be notified about your condition, status and location. You may have the opportunity to object, unless it would impede our ability to respond to emergency circumstances.

Coroners, Medical Examiners, and Funeral Directors.

We may disclose health information consistent with applicable law to coroners, medical examiners, and funeral directors to assist them in carrying out their duties.

Research.

Under certain limited circumstances, we may use and disclose your protected health information for research purposes. For example, a research project may involve comparing the health and recovery of all patients who receive one medication to those who receive another for the same condition. All research projects are subject to a special approval process. Before we use or disclose protected health information for research, the project will have been approved through this research approval process.

Reports Required by Law.

We will disclose your protected health information when required to do so by federal, state, or local law. For example, we make disclosures when a law requires that we report information to government agencies and/or law enforcement personnel about victims of abuse, neglect, or domestic violence; when dealing with gunshot and other wounds; to report reactions to medications or problems with products; or to notify people of product recalls.

Public Health Activities.

We may disclose your protected health information for public health activities. For example, we report information about births, deaths, and various diseases to government officials in charge of collecting that information.

Health Oversight Activities.

We may disclose protected health information to a health oversight agency for activities authorized by law. These oversight activities include, for example, audits, investigations, inspections, and licensure. These activities are necessary for the government to monitor the healthcare system, government programs, and compliance with civil rights laws.

Organ and Tissue Donation.

If you are an organ donor, we may notify organ procurement organizations to assist them in organ, eye, or tissue donation and transplants.

Workers’ Compensation.

We may disclose your protected health information to the extent necessary to comply with laws relating to workers’ compensation or similar programs providing benefits for work-related injuries or illness.

Military, Veterans, National Security, and Other Government Purposes.

If you are a member of the armed forces, we may release your health information to military command authorities or to the Department of Veterans Affairs if they require us to do so. We may also disclose protected health information for certain national security purposes and to the Secret Service to protect the president.

Correctional Institutions.

If you are or become an inmate of a correctional institution or under the custody of a law enforcement official, we may disclose your protected health information to the correctional institution or law enforcement official. This disclosure may be necessary for the institution (i) to provide you with health care; (ii) to protect your health and safety or the health and safety of others; or (iii) for the safety and security of the correctional institution.

Participation in Health Information Networks.

We participate in Contexture, a secure computer network that provides safe and efficient ways to share protected health information with other health care providers. For example, if you require emergency medical care while you are traveling, providers at other health care facilities in Colorado could have access to your protected health information to assist them in caring for you. By participating in this network and other electronic information exchanges, we intend to provide timely information to health care providers involved in your care. If you do not want your information to be shared through Contexture, you may “opt out” by contacting the person listed in Section V below. This is an “all-or-nothing” choice, because Contexture cannot block access to some types of protected health information while at the same time permitting access to other protected health information. Opting out of Contexture may limit your health care providers’ ability to provide the most effective care for you.

Uses and Disclosures Requiring Your Permission

Other uses and disclosures of protected health information not covered by this Notice will be made only with your written permission. If you provide us permission to use or disclose protected health information about you, you may revoke that permission, in writing, at any time. If you revoke your permission, we will no longer use or disclose protected health information about you for the reasons covered by your written authorization, but we cannot take back any disclosures we have already made based on the permission you gave us before. If you want to revoke your permission, please contact the person listed in Section V of this Notice.

Marketing Activities.

We will not use or disclose your PHI to sell you products or services of a third party unless you provide permission. We may suggest products or services to you during our face-to-face communications.

Sale of PHI.

We will not sell your PHI (Personal Health Information) to third parties without your permission.

Protected Health Information That Has Special Protection
Psychotherapy Notes.

Psychotherapy notes are the personal notes of psychotherapists. We must obtain your permission to use or disclose psychotherapy notes, except under limited circumstances.

Alcohol and Drug Abuse Patient Records.

Use and disclosure of any protected health information about you relative to alcohol or drug abuse treatment programs, is protected by federal law. Generally, we will not disclose any information identifying you as a recipient of alcohol or drug abuse treatment unless: (i) you have consented in writing; (ii) we receive a court order requiring the disclosure; (iii) the disclosure is made to medical personnel in a medical emergency or to qualified personnel for research, audit, or program evaluation; or (iv) disclosure is required to report child abuse or neglect.

HIV/AIDS Information.

Use and disclosure of any protected health information about you relative to HIV testing, HIV status, or AIDS, is protected by federal and state law. Generally, we will need your permission to disclose this information; however, state law may allow for disclosure of information for public health purposes.

Minors.

As a general rule, we disclose PHI about minors to their parents or legal guardians. However, in instances where state law allows minors to consent to their own treatment without parental consent (such as HIV testing), we will not disclose that information to a minor’s parents without the minor’s permission unless otherwise specifically allowed under state law.

III. YOUR RIGHTS REGARDING YOUR PROTECTED HEALTH INFORMATION.

The following section describes your rights with respect to your protected health information and a brief description of how you may exercise these rights.

The Right to Inspect and Obtain a Copy of Your Protected Health Information.

You have the right to see and receive a paper or electronic copy of protected health information maintained by us that may be used to make decisions about your care. (The law requires us to keep the original record.) Usually, this includes your medical and billing records. To inspect and/or receive a copy of your protected health information, you must submit your request in writing to our Risk or Medical Records Department, 526 29 1/2 Road Grand Junction, CO 81504. If you request a copy of the information, we may charge you a reasonable fee based on our costs.

The Right to Amend.

If you believe that protected health information we have about you is incorrect or incomplete, you have the right to request that we correct the existing information or add missing information. To request an amendment, you must make the request in writing along with your reason for the request to the person listed in Section V below.

The Right to a List of Disclosures.

You have the right to request a list of certain disclosures of your protected health information. To request this list or accounting of disclosures, you must submit a request in writing indicating a time period, which can be no longer than six years, to the person listed in Section V below. The first list you request within a 12-month period will be free. For additional lists during the same year, we may charge you for the costs of providing the list. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.

The Right to Request Restrictions on How We Use and Disclose Your Protected Health Information.

You may ask us not to use or disclose your protected health information for a particular reason related to treatment, payment or health care operations. We will consider your request, but we are not legally obligated to agree to a requested restriction except in the following situation: if you have paid for services out-of-pocket in full, you may request that we not disclose information related solely to those services to your health plan. We are required to abide by such a request, except where we are required by law to make the disclosure. To request restrictions on the use or disclosure of your PHI, you may do so at the time you register for services or by contacting the person listed in Section V below.

The Right to Request Confidential Communications.

You have the right to ask that protected health information about you be communicated to you in an alternate confidential manner, such as asking that appointment reminders not be left on an answering machine, that mail be sent to an alternate address, or that notices or reminders be sent by e-mail instead of regular mail. We will agree to all reasonable requests so long as we can easily provide it in the format you request. To request protected health information be sent to an alternative address or by other means, please contact the person listed in Section V below in writing, or in a clinic setting, please contact the practice manager.

The Right to a Paper Copy of This Notice.

You have the right to a paper copy of this Notice. You may ask us to give you a copy of this Notice at any time. Paper copies are available at our registration locations and our Risk Department. You may also obtain a copy of this Notice on our website at primehealthplus.org.

IV. COMPLAINTS ‏

If you believe that we may have violated your rights with respect to your protected health information, you may file a written complaint with the person listed in Section V below. You also may initiate a complaint to the Office for Civil Rights, U.S. Department of Health and Human Services. More information about this complaint process is available at https://www.hhs.gov/hipaa/filing-a-complaint/complaint-process/index.html. You will not be penalized for filing a complaint about our privacy practices. You will not be required to waive this right as a condition of treatment.

V. PERSON TO CONTACT FOR INFORMATION ABOUT THIS NOTICE OR TO COMPLAIN ABOUT OUR PRIVACY PRACTICES

If you have any questions about this Notice or wish to make a complaint about our privacy practices, please contact our Privacy Officer at 970-200-1600. Formal complaints must be in writing. Complaint forms are available at all registration areas or from the Risk Department.

VI. CHANGES

We reserve the right to change the terms of this Notice and our privacy policies at any time. We reserve the right to make the revised Notice effective for protected health information we already have about you as well as any information we receive in the future. Before we make an important change to our policies, we will promptly change this Notice and post a new Notice in our registration areas. The Notice will contain the effective date. You can also request a copy of this Notice from the contact person listed in Section V above at any time or can view a current copy of the Notice on our website at www.primehealthplus.org.

VII. ACKNOWLEDGEMENT

You will be asked to sign an acknowledgement of your receipt of this Notice of Privacy Practices. We are required by law to make a good faith effort to provide you with our Notice of Privacy Practices and obtain an acknowledgement from you that you received it. Your care and treatment at our facility does not depend on signing the acknowledgment.