Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW HEALTH INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
I. MY PLEDGE REGARDING HEALTH INFORMATION:
I understand that health information about you and your health care is personal. I am committed to protecting health information about you. I create a record of the care and services you receive from me. I need this record to provide you with quality care and to comply with certain legal requirements. This notice applies to all of the records of your care generated by this mental health care practice. This notice will tell you about the ways in which I may use and disclose health information about you. I also describe your rights to the health information I keep about you, and describe certain obligations I have regarding the use and disclosure of your health information. I am required by law to:
• Make sure that protected health information (“PHI”) that identifies you is kept private.
• Give you this notice of my legal duties and privacy practices with respect to health information.
• Follow the terms of the notice that is currently in effect.
• I can change the terms of this Notice, and such changes will apply to all information I have about you. The new Notice will be available upon request.
II. HOW I MAY USE AND DISCLOSE HEALTH INFORMATION ABOUT YOU:
The following categories describe different ways that I use and disclose health information. For each category of uses or disclosures I will explain what I mean and try to give some examples. Not every use or disclosure in a category will be listed. However, all of the ways I am permitted to use and disclose information will fall within one of the categories.
For Treatment. Your PHI may be used and disclosed by those who are involved in your care for the purpose of providing, coordinating, or managing your health care treatment and related services. This includes consultation with clinical supervisors or other treatment team members. I may disclose PHI to any other consultant only with your authorization.
For Payment. I may use and disclose PHI so that I can receive payment for the treatment services provided to you. This will only be done with your authorization. Examples of payment-related activities are: making a determination of eligibility or coverage for insurance benefits, processing claims with your insurance company, reviewing services provided to you to determine medical necessity, or undertaking utilization review activities. If it becomes necessary to use collection processes due to lack of payment for services, I will only disclose the minimum amount of PHI necessary for purposes of collection.
For Health Care Operations. I may use or disclose, as needed, your PHI in order to support my business activities including, but not limited to, quality assessment activities, employee review activities, licensing, and conducting or arranging for other business activities. For example, I may share your PHI with third parties that perform various business activities (e.g., billing services) provided I have a written contract with the business that requires it to safeguard the privacy of your PHI. For training or teaching purposes PHI will be disclosed only with your authorization.
Required by Law. Under the law, I must disclose your PHI to you upon your request. In addition, I must make disclosures to the Secretary of the Department of Health and Human Services for the purpose of investigating or determining my compliance with the requirements of the Privacy Rule.
III. CERTAIN USES AND DISCLOSURES DO NOT REQUIRE YOUR AUTHORIZATION. Following is a list of the categories of uses and disclosures permitted by HIPAA without an authorization. The following language addresses these categories to the extent consistent with the NASW Code of Ethics and HIPAA. Applicable law and ethical standards permit me to disclose information about you without your authorization only in a limited number of situations such as:
When disclosure is required by state or federal law, and the use or disclosure complies with and is limited to the relevant requirements of such law.
For public health activities, including reporting suspected child, elder, or dependent adult abuse, or preventing or reducing a serious threat to anyone’s health or safety.
For health oversight activities, including audits and investigations.
For judicial and administrative proceedings, including responding to a court or administrative order, although my preference is to obtain an Authorization from you before doing so.
For law enforcement purposes, including reporting crimes occurring on my premises.
To coroners or medical examiners, when such individuals are performing duties authorized by law.
For research purposes, including studying and comparing the mental health of patients who received one form of therapy versus those who received another form of therapy for the same condition.
Specialized government functions, including, ensuring the proper execution of military missions; protecting the President of the United States; conducting intelligence or counter-intelligence operations; or, helping to ensure the safety of those working within or housed in correctional institutions.
For workers’ compensation purposes. Although my preference is to obtain an Authorization from you, I may provide your PHI in order to comply with workers’ compensation laws.
Appointment reminders and health related benefits or services. I may use and disclose your PHI to contact you to remind you that you have an appointment with me. I may also use and disclose your PHI to tell you about treatment alternatives, or other health care services or benefits that I offer.
I may use or disclose your PHI in a medical emergency situation to medical personnel only in order to prevent serious harm.
V. CERTAIN USES AND DISCLOSURES REQUIRE YOU TO HAVE THE OPPORTUNITY TO OBJECT.
Disclosures to family, friends, or others. I may provide your PHI to a family member, friend, or other person that you indicate is involved in your care or the payment for your health care, unless you object in whole or in part. The opportunity to consent may be obtained retroactively in emergency situations.
VI. YOU HAVE THE FOLLOWING RIGHTS WITH RESPECT TO YOUR PHI:
Right of Access to Inspect and Copy. You have the right, which may be restricted only in exceptional circumstances, to inspect and copy PHI that is maintained in a “designated record set”. A designated record set contains mental health/medical and billing records and any other records that are used to make decisions about your care. Your right to inspect and copy PHI will be restricted only in those situations where there is compelling evidence that access would cause serious harm to you or if the information is contained in separately maintained psychotherapy notes. I may charge a reasonable, cost-based fee for copies. If your records are maintained electronically, you may also request an electronic copy of your PHI. You may also request that a copy of your PHI be provided to another person.
Right to Amend. If you feel that the PHI I have about you is incorrect or incomplete, you may ask me to amend the information although I am not required to agree to the amendment. If I deny your request for amendment, you have the right to file a statement of disagreement with me. I may prepare a rebuttal to your statement and will provide you with a copy.
Right to an Accounting of Disclosures. You have the right to request an accounting of certain of the disclosures that I make of your PHI. I may charge you a reasonable fee if you request more than one accounting in any 12-month period.
Right to Request Restrictions. You have the right to request a restriction or limitation on the use or disclosure of your PHI for treatment, payment, or health care operations. I am not required to agree to your request unless the request is to restrict disclosure of PHI to a health plan for purposes of carrying out payment or health care operations, and the PHI pertains to a health care item or service that you paid for out of pocket. In that case, I am required to honor your request for a restriction.
Right to Request Confidential Communication. You have the right to request that I communicate with you about health matters in a certain way or at a certain location. I will accommodate reasonable requests. I may require information regarding how payment will be handled or specification of an alternative address or other method of contact as a condition for accommodating your request. I will not ask you for an explanation of why you are making the request.
Breach Notification. If there is a breach of unsecured PHI concerning you, I may be required to notify you of this breach, including what happened and what you can do to protect yourself.
Right to a Copy of this Notice. You have the right to a copy of this notice.
This notice went into effect on September 20, 2013