Privacy Statement
MINNESOTA PROVIDER NOTICE OF PRIVACY PRACTICES
CLUES, INC.
EFFECTIVE DATE OF THIS NOTICE: 12/3/2013
THIS NOTICE DESCRIBES HOW INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Pledge And Legal Duty To Protect Health Information About You.
The privacy of your health information is important to us. We are required by federal and state laws to protect the privacy of your health information. We must give you notice of our legal duties and privacy practices concerning your health information, including:
- We must protect information that we have created or received about your past, present, or future health condition, health care we provide to you, or payment for your health care.
- We must notify you about how we protect your health information.
- We must explain how, when and why we use or disclose your health information.
- We may only use or disclose your health information as we have described in this Notice.
- We must abide by the terms of this Notice.
- We must notify you if we are unable to agree to a requested restriction on how your information is used or disclosed.
- We must notify you of any breach of your unsecured protected health information
- We must accomodate reasonable requests you may make to communicate health information by alternative means or at alternative locations.
- We must obtain your written authorization to use or disclose your health information for reasons other than those listed above and permitted under law.
We are required to abide by the terms of this Notice. We reserve the right to change the terms of this Notice and to make new Notice provisions effective for all health information that we maintain. We will post a revised Notice in our offices, make copies available to you upon request and post the revised Notice on our website.
USES AND DISCLOSURES OF YOUR HEALTH INFORMATION
There are a number of purposes for which it may be necessary for us to use or disclose your health information. For some of these purposes, we are required to obtain your consent. In other specific instances, we may be required to obtain your individual authorization. And in a limited number of circumstances, we will be authorized by Law to disclose your health information without your consent or authorization. Following is a description of these uses and disclosures. For each category of uses or disclosures we will explain what we mean and try to give some examples. Not every use or disclosure in a category will be listed. However, all of the ways we are permitted to use and disclose information will fall within one of the categories.
A. Uses and Disclosures of Your Health Information for Purposes of Treatment, Payment and Health Care Operations.
- Health Care Treatment. We may use or disclose health information about you to provide and manage your health care. This may include communicating with other health care providers regarding your treatment and coordinating and managing the delivery of health services with others. For example, we may use or disclose health information about you when you need a prescription, lab work, an x-ray, or other health care services.
- Appointment Reminders and Other Contacts. We may use your health information to contact you with reminders about your appointments, alternative treatments you may want to consider, or other of our services that may be of interest to you.
- Payment. We may use or disclose your health information to bill and collect payment for the treatment and services provided to you. For example: A bill may be sent to you or a third party payer. The information on, or accompanying the bill may include information that identifies you, as well as your diagnosis, procedures and supplies used.
- Health Care Operations. We may use or disclose health information about you to allow us to perform business functions. For example, we may use your health information to help us train new staff and conduct quality improvement activities. We may also disclose your information to consultants and other business associates who help us with these functions (for example, billing, computer support and transcription services) or providers participating in an organized healthcare arrangement with us.
- Fundraising. As part of our health care operations, we may use or disclose your demographic information and dates of treatment to contact you to raise money for our organization; however, we must allow you to opt out of receiving future fundraising communications and provide clear procedures as to how you would opt out of such communications.
Minnesota Patient Consent for Disclosures.
For some of the disclosures of health information described above, we are required by Minnesota Laws to obtain a written consent from you, unless the disclosure is authorized by Law.
B. Uses and Disclosures of Your Health Information that Require Your Opportunity to Agree or Object.
In the following instances we will provide you with the opportunity to agree or object to our use or disclosure of your health information:
- Facility Directory. We may use or disclose your name, location in the facility, general condition, and religious affiliation for facility directory purposes. This information may be provided to members of the clergy and, except for religious affiliation, to other people who ask for you by name.
- Persons Involved in Your Care. We may, using our best judgment, disclose to a family member, other relative, close personal friend or any other person identified by you, health information relevant to that person’s involvement in your care or payment related to your care.
- Notification to Others. We may, in some instances, disclose health information about you to a family member, a personal representative, or another person responsible for your care, in order to notify such person about your current location or general condition.
Specific disclosures which require authorization under HIPAA.
Under certain circumstances we are authorized by Law to use or disclose your health information without obtaining a consent or authorization from you. These may include when the use or disclosure is:
Uses and Disclosures You Specifically Authorize: You may give us written authorization to use your protected health information or to disclose it to anyone for any purpose. If you give us an authorization, you may revoke it in writing at any time. If you revoke your permission, we will stop using or disclosing your protected health information in accordance with that authorization, except to the extent we have already relied on it. Without your written authorization, we may not use or disclose your protected health information for any reason except those described in this Notice.
Psychotherapy Notes: We must obtain an authorization for any use or disclosure of psychotherapy notes, except in limited Circumstances as provided in 45 C.F.R.§ 164.508 (a) (2).
Marketing: We must obtain and authorization for any use or disclosure of protected health information for marketing (as defined under HIPAA) except if the communication is in the form of a face-to-face communication made by us to an individual; or a promotional gift of nominal value provided by us. If the marketing involves financial remuneration, as defined in paragraph (3) of the definition of marketing at 45 C.F.R. §164.501, to us from a third party, the authorization must state that such remuneration is involved.
Sale of Protected Health Information: Except in limited circumstances covered by the transition provisions in 45 C.F.R. §164.532, we must obtain an authorization for any disclosure of protected health information which is a sale of protected health information, as defined in 45 C.F.R. §164.501. Such authorization must state that the disclosure will result in remueration to the covered entity.
Uses and Disclosures Authorized by Law
Under circumstances we are authorized by Law to use or disclose your health information without obtaining a consent or authorization from you. These may include when the use or disclosure is:
- Required by Law. We will disclose your health information when such disclosure is required by federal, state, or local laws.
- Necessary for public health activities. For example, when reporting to public health authorities the exposure to certain communicable diseases or risks of contracting or spreading a disease or condition.
- Related to victims of abuse and neglect. For example, when reporting suspected victims of abuse or neglect.
- For health oversight activities. For example, when disclosing health information to a state or federal health oversight agency so that they can appropriately monitor the health care system.
- For judicial and administrative proceedings. For example, when responding to a request for health information contained in a a court order.
- For law enforcement purposes. For example, when complying with laws that require the reporting of certain types of wounds or injuries, or in releasing information to law enforcement officials in response to a summons or to identify or locate a suspect, fugitive, material witness, or missing person.
- To avert a serious threat to health or safety. For example, when disclosing health information that will help prevent a serious threat to the health or safety of you or another person of the public.
- Related to specialized government functions. For example, we may disclose health information about you if it relates to military and veterans’ activities or national security.
- Related to Workers’ Compensation. For example, when reporting health information to entities that provide benefits for work-related injuries and illness.
- Related to correctional institutions. And in other custody situations.
- For research. Under certain circumstances, we may use and disclose health information about you for research purposes. For example, a research project may involve comparing the health and recovery of all patients who received one medication to those who received another, for the same condition. All research projects, however, are subject to a special approval process. This process evaluates a proposed research project and its use of health information, trying to balance the research needs with patients need for privacy of their health information. Before we use or disclose health information for research, the project will have been approved through this research approval process; but we may disclose health information about you to people preparing to conduct a research project. For example, we may help potential researchers look for patients with specific health needs, so long as the health information they review does not leave the facility.
Uses and Disclosures of Your Health Information that Require your Authorization.
Other uses and disclosures of your health information not covered in this notice will be made only with your written authorization. If you give us an authorization, you may revoke it in writing at any time. Your revocation will not affect any uses or disclosures permitted by your authorization while it was in effect.
YOUR INDIVIDUAL RIGHTS
A. Right to Access and Copy Your Health Information.
You have the right to access and receive a copy or a summary of your health information contained in clinical, billing and other records that we maintain and use to make decisions about you. We ask that your request be made in writing. We may charge a reasonable fee. There might be limited situations in which we may deny your request. Under these situations, we will respond to you in writing, stating why we cannot grant your request and describing your rights to request a review of our denial.B. Right to Request an
B. Amendment of Your Health Information.
You have the right to request amendments to the health information about you that we maintain and use to make decisions about you. We ask that your request be made in writing and must explain, in as much detail as possible, your reason(s) for the amendment and, when appropriate, provide supporting documentation. Under limited circumstances we may deny your request. If we deny your request, we will respond to you in writing stating the reasons for the denial. You may file a statement of disagreement with us. You may also ask that any future disclosures of the health information under dispute include your requested amendment and our denial to your request.
C. Right to Request Restrictions on Uses and Disclosures of Your Health Information.
You have the right to request that we restrict our use or disclosure of your health information. We ask that your request be made in writing. We are not required to agree to your request for a restriction, and we will notify you of our decision. However, if we do agree, we will comply with our agreement, unless there is an emergency or we are otherwise required to use or disclose the information.
D. Right to Request Confidential Communications.
Periodically, we will contact you by phone, email, postcard reminders, or other means to the location identified in our records with appointment reminders, results of tests or other health information about you. You have the right to request that we communicate with you in a specific way or at a specific location. For example, you may request that we contact you at your work address or phone number or by email. We ask that your request be made in writing. While we are not required to agree with your request, we will make efforts to accommodate reasonable requests.
E. Right to Request and Accounting of Disclosures of Health Information.
You have the right to request a listing of certain disclosures we have made of your health information. We ask that your request be made in writing. You may ask for disclosures made up to six (6) years before the date of your request. We will provide you one accounting in any 12-month period free of charge.
F. Right to Receive a Copy of This Notice.
You have the right to request and receive a paper copy of this Notice at any time. We will make this Notice available in electronic form and post it in our web site.
G. Right to Limit Sharing of Information with Health Plan.
If you have paid for your services out of pocket in full at or before the date of service, and at your request, we will not share information about those services with a health plan for purposes of payment or health care operations. “Health plan” means an organization that pays for your medical care.
H. Right to Notice of Breach.
You have the right to notice of a “Breach” involving any of your “Unsecured PHI” as these terms are defined under the federal law commonly known as the HITECH Act. Not all unauthorized uses or disclosure of your PHI will be considered a breach under the law. This notice will be sent as required under the law. If you authorize us to communicate with you by e-mail we may e-mail you notice of any breach. In most other cases we will send you the required notice in writing and by mail.
I. Right to Electronic Copy of “Electronic Health Record”.
If we maintain your “Electronic Health Record,” you have the right to ask for an accounting of disclosures of where we disclosed your health information. You may request an accounting for a period of three years prior to the date the accounting is requested. You also have the right to ask our business associates for an accounting of their disclosures. In addition, if you have an “Electronic Health Record” with us, you have a right to request an electronic copy of your Electronic Health Record. Not all healthcare information stored electronically is considered an Electronic Health Record. The term ‘‘Electronic Health Record’’ means an electronic record of health-related information on an individual that is created, gathered, managed, and consulted by authorized health care clinicians and staff.