HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT (HIPAA)
NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. WE ARE REQUIRED BY FEDERAL LAW TO PROVIDE YOU WITH THIS NOTICE.
If you have any questions about this Notice please contact our Privacy Contact who is The Chief Operations Officer or the Site Manager.
This Notice describes how we may use and share your protected health information to carry out treatment, payment or health care operations. Thundermist may also share protected health information for purposes that are permitted or required by law. It also describes your rights to access and control your protected health information. "Protected health information" is information about you, including demographic information, that may identify you and that relates to your past, present or future physical or mental health and related health care services (referred to as "PHI").
We are required to abide by the terms of this Notice which we may change from time to time. Any new Notice will be effective for all PHI that we maintain at that time. We will provide you with any revised Notice upon your request of our Privacy Contact.
1. Thundermist does not need your permission to share your PHI when it is used for treatment, payment of claims or other health care operations of Thundermist
PHI may be used and shared by your physician, our office staff and others outside of our office that are involved in your care and treatment for the purposes of providing and paying for health care services to you. Your PHI may also be used and shared to support ThundermistÕs health care operations. Following are examples of the types of uses of PHI for the purposes of treatment, payment and health care operations.
Treatment: When Thundermist referrs you to another provider, or in the case of a medical emergency, your PHI will be shared with that provider to ensure appropriate diagnose and treatment.
Payment: We may share PHI, as needed, to get payment from your health insurance plan (including Medicare), to determine eligibility or coverage for insurance benefits and to undertake establish medical necessity and utilization review activities e.g., obtaining approval for a hospital stay.
Health Care Operations: We may share PHI, as needed, for certain business activities relating to Health Center. These activities include, but are not limited to, quality assurance activities, training medical students who see you in our office, and employee review activities. We may also use a sign in sheet at the registration desk and may call you by name in the waiting room when it is time to see you. We may use or share PHI, as necessary, to contact you to remind you of your appointment. We may also use or share PHI, as necessary, to inform you of other treatment choices or other health related benefits and services that may be of interest to you. You may contact our Privacy Contact to request if you do not want these materials sent to you.
We also may share PHI with certain businesses that perform various activities e.g. billing, transcription services) for the Health Center. In these instances, we will have a written contract with these businesses to protect the privacy of your PHI.
2. Thundermist may use or share your PHI without your consent, as required by and in accordance with law.
Public Health and Oversight Agencies: We may disclose PHI to the Rhode Island Department of Health ("DOH") and other public health authorities for the purpose of controlling disease. We may share PHI to any authority authorized by law to receive reports of child abuse or neglect. Thundermist may share PHI if we believe that you have been the victim of abuse, neglect, or domestic violence.
We may also use or share PHI with an authorized public or private entity to assist in disaster relief efforts. We may disclose PHI to a health oversight agency, e.g., the Rhode Island Board of Medical Licensure and Discipline and DOH for activities authorized by law, for licensing of health care professionals, investigation, and inspections.
Communicable Diseases: We may disclose PHI to a person who may have been exposed by you to a communicable disease.
Food and Drug Administration ("FDA"): We may disclose PHI to the FDA to report bad reactions to medications, product defects, and other information, required by and subject to the jurisdiction of the FDA.
Legal Proceedings: We may disclose PHI in the course of any legal proceeding, in response to a court order or, in certain instances, in response to a subpoena so long as you have been notified or attempts to notify you have been made according to law.
Law Enforcement: We may also disclose PHI to law enforcement authorities, so long as all applicable legal requirements are met.
Medical Examiner: We may disclose PHI to a medical examiner, e.g., for identification purposes or determining cause of death.
Criminal Activity: We may disclose PHI, if we believe that the use or disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
Workers' Compensation: We may disclose PHI to comply with workers' compensation laws and other similar programs.
Required Uses and Disclosures: Under the law, we must make disclosures to you and to the Secretary of the United States Department of Health and Human Services ("Secretary") to investigate or determine our compliance with the federal privacy regulations.
3. Your Rights
This Section of the Notice describes your rights with respect to PHI and a brief description of how you may exercise these rights. Please contact our Privacy Contact with any questions or to assert any of your rights.
a. Generally, you have the right to inspect and copy PHI as long as we maintain it. There are a few exceptions. Thundermist may copy psychotherapy notes. Thundermist will not copy any PHI in anticipation of a lawsuit or other proceeding or if the law prohibits your access.
Depending on the circumstances, a decision to deny access may be reviewable.
b. You have the right to request certain restrictions on certain uses and disclosures of PHI. You may ask us not to use or share portions of PHI for the purposes of treatment, payment or healthcare operations. You may also request that portions of PHI not be disclosed to family members or friends who may be involved in your care (upon your consent or as otherwise authorized) or to notify them about your medical condition. Your request must state the specific restriction requested and to whom you want the restriction to apply.
Thundermist is not required to agree to a restriction that you may request. If we believe it is in your best interest to permit use and disclosure of PHI, PHI will not be restricted. If we agree to the requested restriction, we will not use or disclose PHI in violation of that restriction unless it is needed to provide emergency treatment.
c. You have the right to request to receive confidential communications from us by alternative means or at an alternative location. We will accommodate all reasonable requests and we will not request an explanation from you as to the basis for the request.
d. Depending upon the circumstances, you may have the right to change PHI. In certain cases, we may deny your request because we believe that the PHI is accurate and complete. If we deny your request for changes, you have the right to file a statement of disagreement with us which we will consider. We may prepare a rebuttal to your statement and provide you with a copy of any such rebuttal.
e. You have the right to receive an accounting of certain disclosures we have made, if any, of PHI. Thundermist will keep a list of times it shares your PHI. This list will not include treatment, payment, healthcare operations, disclosures to you or a family member, or those times you have authorized disclosure. You have the right to know when Thundermist has shared your PHI. Thundermist does not have to document any shared PHI prior to April 14, 2003.
4. Uses and Disclosures of PHI Based upon Your Written Authorization
Other uses and sharing of PHI will be made only with your written authorization. You may take back this authorization at any time, in writing. If Thundermist has already shared your PHI it will not be recalled, nor will your request to take back the authorization over ride any obligation required by law.
You may file a complaint with us and/or to the Secretary if you believe your privacy rights have been violated by us. You may file a complaint with us by notifying our Privacy Contact of your complaint. Please be assured that we will not retaliate against you, in any way, for filing a complaint. We would appreciate your advising us of any of your concerns first so that we may address them.
You may contact our Privacy Contact, the Chief Operations Officer at (401) 767-4100 for further information about the complaint process.
This Notice became effective on April 14, 2003.