NOTICE OF PRIVACY PRACTICES
Effective Date: April 14, 2003
THIS NOTICE DESCRIBES
HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND
HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW THIS NOTICE CAREFULLY AND IF YOU HAVE ANY QUESTONS ABOUT THE
NOTICE, PLEASE CONTACT OUR PRIVACY OFFICER.
This Notice
of Privacy Practices describes how we may use and disclose your protected
health information to carry out treatment, payment or health care operations
and for other purposes that are permitted or required by law. It
also describes your rights to access and control your protected health
information. "Protected health information" (or
"PHI" for short) is information about you, including demographic
information, that may identify you and that relates to your past, present or
future physical or mental health or condition and related health care services
including the payment for your health care.
We are
required by law to maintain the privacy of your PHI and to provide you with
this notice informing you of our legal duties and privacy practices with
respect to your PHI. We are required to abide by the terms of this
Notice of Privacy Practices. We may change the terms of our notice,
at any time. The new notice will be effective for all PHI that we
maintain at that time. Upon your request, we will provide you with
any revised Notice of Privacy Practices at the time of your next appointment.
We will also post the revised notice in our office.
I.
Uses and Disclosures of Protected Health Information
A.
We may use and disclosure your PHI for treatment, payment and health care
operations.
Your PHI may be used and disclosed by our health care providers and our office
staff and others outside of our office that are involved in your care and
treatment for the purpose of providing health care services to you.
Your PHI may also be used and disclosed to pay your health care bills and to
support the operation of our practice.
Following are examples of the types of uses and disclosures of your PHI that
our office is permitted to make. These examples are not meant to be
exhaustive, but to describe the types of uses and disclosures that may be made
by our office.
1. We may use and disclose your PHI to provide
health care treatment.
We will use and disclose your PHI to provide, coordinate, or manage your health
care and any related services. This may include communicating with
other health care providers regarding your treatment and coordinating and
managing your health care with others. For example, we may disclose
your PHI when you need a laboratory study, a prescription, an x-ray or other
health related services.
In addition, we may disclose your PHI from time-to-time to another physician or
health care provider such as a specialist who, at our request, becomes involved
in your care by providing assistance with your health care diagnosis or
treatment to your physician.
EXAMPLE: When we schedule you for an MRI or x-ray, we will need to inform them
of any allergies you may have to the dye or other materials used in the
procedure. If you are referred to another physician for treatment,
that physician may need to know of other health problems you may have or
medications that you are taking that might influence his treatment.
2. We may use and disclose PHI in order to
obtain payment for services.
Our office may also need to use and disclose your PHI to others in order to
bill and collect payment for the treatment and other services we provide to
you. Before certain services are provided to you, we may need to
share some of your PHI with your health plan. This will allow us to
verify coverage or to obtain pre-approval for studies and other tests that we
may need to order for your health plan to pay for them.
We may also disclose identifiable health information to obtain payment from
third parties such as insurance companies or family members that may be
responsible for payment. We may also share portions of our PHI with
our billing company or collection agency.
EXAMPLE: If you have a prescription plan, we may need to give the plan your PHI
including other medications you have taken in the past and other information
relating to your condition in order for them to approve the
prescription.
3. We may use and disclose PHI for our health
care operations.
We may use or disclose your PHI in order to support the business activities of
our practice which we call "health care operations. "
These health care operations allow us to improve the quality of care we provide
and reduce health care costs.
Examples of the way we may use or disclose PHI about you for "health care
operations" include, but are not limited to, reviewing the quality of
services we provide to you, evaluating our professional and business staff,
having medical residents or students train in our office and conducting or
arranging for other business activities.
We may also contact you to remind you of your next appointment with us, to
notify you of test results or to provide you with information about treatment
alternatives or services that may be of interest to you. Contact
may be made by phone, fax, mail or email. We may leave a message
for you on your answering machine or voice mail. The name and
address of our practice will appear on the outside of the envelopes that we
mail to you. We may also ask that you use a sign-in sheet at the
registration desk when you come in for your appointment. We may
also call you by name in the waiting room when your health care provider is
ready to see you.
We may also share your PHI with third party "business associates"
that perform certain activities for us or provide a service to us.
These include our billing company, a management company or a transcriptionist
who types our letter and notes. Whenever an arrangement between our
office and a business associate involves the use or disclosure of your PHI, we
will have a written contract that contains terms that will protect the privacy
of your protected health information.
We will disclose identifiable health information only to the extent reasonably
necessary to perform the above-mentioned activities of our
practice. In some instances, we may need to use or disclose all of
the information, while other times, we may need to use or disclose only certain
information.
B.
You may agree or object to certain uses and disclosures we may
make.
If you agree, we may disclose your PHI in the following instances.
You may object to the use or disclosure of all or part of your PHI.
If the opportunity to object to uses and disclosures cannot practically be
provided because of your incapacity or in an emergency treatment circumstance,
your health care provider may, using professional judgment, determine whether
the disclosure is in your best interest. In this case, only the PHI
that is relevant to your health care will be disclosed.
1. We may disclose PHI to others involved in
your health care.
Unless you object, we may disclose to a member of your family, a relative, a
close friend or any other person you identify, your PHI that directly relates
to that person's involvement in your health care. If you are unable
to agree or object to such a disclosure, we may disclose such information as
necessary if we determine that it is in your best interest based on our
professional judgment. We may use or disclose PHI to notify or
assist in notifying a family member, personal representative, or any other
person that is responsible for your care, of your location, general condition
or death.
2. We may disclose PHI for disaster relief
purposes.
Finally, we may use or disclose your PHI to a public or private agency
authorized by law or charter to assist in disaster relief efforts such as the
American Red Cross.
C.
We may use or disclose your PHI in other situations without your
authorization.
1. Required by Law.
We may use or disclose your PHI to the extent that the use or disclosure is
required by law. The use or disclosure will be made in compliance
with the law and will be limited to the relevant requirements of the
law.
2. Public Health.
We may disclose your PHI for public health activities and purposes to a public
health authority that is authorized by Pennsylvania law to collect or receive
the information. The disclosure will be made for the purpose of
controlling disease, injury or disability. For example, we are
required under Pennsylvania law to report the presence of certain bacteria in
laboratory tests, or the results of a positive Lyme test.
If we are examining or treating you at the request of your employer, we are
required to disclose your PHI that consists of findings we obtained during this
examination/treatment to your employer.
We may also disclose your PHI to an individual associated with the FDA in the
event of a drug recall or to report a side effect or adverse event.
We may disclose your PHI, if authorized by law, to a person who may have been
exposed to a communicable disease or may otherwise be at risk of contracting or
spreading the disease or condition.
3. Health Oversight.
We may disclose PHI to a health oversight agency for activities authorized by
law, such as audits, civil, administrative or criminal investigations,
inspections, and licensing activities.
4. Abuse or Neglect.
Pennsylvania law requires that we report cases of child abuse to a government
authority, if we have reasonable cause to suspect that a child is the victim of
abuse. In addition, we may disclose your PHI if we believe that you
(as an adult) are a victim of abuse, neglect or domestic violence to the
governmental entity or agency authorized to receive such
information. In this case, the disclosure will be made consistent
with the requirements of applicable federal and Pennsylvania laws.
5. Judicial and Administrative
Proceedings.
We may disclose your PHI in response to a court order or subpoena.
All disclosures will be made consistent with the requirements of applicable
federal and Pennsylvania law.
6. Law Enforcement.
We may also disclose PHI so long as applicable legal requirements are met, for
law enforcement purposes. These law enforcement purposes include:
(1) legal processes and as otherwise required by law such as
the reporting of certain types of injuries,
(2) limited information requests for identification and location purposes,
(3) if you are or may be a victim of a crime,
(4) suspicion that your death has occurred as a result of criminal conduct,
(5) in the event that a crime occurs on the premises of our practice, and
(6) if we provide medical care in response to a medical emergency and it is
likely that a crime has occurred.
7. Coroners and Funeral Directors.
We may disclose PHI to a coroner or medical examiner for identification
purposes to determine cause of death or for the coroner or medical examiner to
perform other duties authorized by law. We may also disclose PHI to
a funeral director, as authorized by law, in order to permit the funeral
director to carry out his duties.
8. Organ Donation.
PHI may be used and disclosed to organ procurement organizations for cadaveric
organ, eye or tissue donation purposes.
9. Research.
If we disclose your PHI for research, we will comply with federal and
Pennsylvania law regarding such disclosures. An authorization will
also be obtained from you.
10. To Avert Serious Threat.
We may disclose your PHI if we believe in good faith that the use or disclosure
is necessary to prevent or reduce a serious and imminent threat to the health
and safety of another person or the public. Under these
circumstances, we will only disclose health information to someone who is able
to help prevent or lesson the threat.
11. For Government Functions.
Consistent with applicable federal laws, we may disclose your PHI if you are a
member of the Armed Forces:
(1) for activities deemed necessary by appropriate military
command authorities;
(2) for the purpose of a determination by the Department of Veteran Affairs of
your eligibility for benefits; or
(3) to a foreign military authority if you are a member of that foreign
military services. We may also disclose your PHI to authorized
federal officials for conducting national security and intelligence activities,
including for the provision of protective services to the President or others
individuals. Also, we may disclose to a correctional institution or
law enforcement officials having legal custody of the inmate.
12. Workers' Compensation.
Your PHI may be disclosed by us as authorized to comply with worker's
compensation laws and other similar government programs that provide public
benefits.
D. We are required to disclose your PHI upon
request to the Secretary of HHS. We are required to disclose your
PHI to the Secretary of Health and Human Services to investigate or determine
our compliance with the Privacy Regulations.
E. All other disclosures require your written
authorization. Other uses and disclosures of your PHI will be made
only with your written authorization, unless otherwise permitted or required by
law as described below. You may revoke this authorization, at any
time, in writing, except to the extent that we have taken an action in reliance
on the use or disclosure indicated in the authorization.
II.
Your Rights.
Following is a statement of your rights with respect to your PHI and a brief
description of how you may exercise these rights.
A.
You Have the Right to Request a Restriction of Your Protected Health
Information.
This means you may ask us not to use or disclose any part of your PHI for the
purposes of treatment, payment or healthcare operations. You may
also request that any part of your PHI not be disclosed to family members or
friends who may be involved in your care or for notification purposes as described
in this Notice of Privacy Practices. Your request must state the
specific restriction requested and to whom you want the restriction to
apply.
We are not required to agree to a restriction that you may request.
If we believe it is in your best interest to permit use and disclosure of your
PHI, your PHI will not be restricted. If we agree to the requested
restriction, we may not use or disclose your PHI in violation of that
restriction unless it is needed to provide emergency treatment.
Please discuss any restriction you wish to request with our Privacy
Officer.
B.
You Have the Right to Receive Confidential Communications of PHI from us by
Alternative Means or at an Alternative Location.
We will accommodate reasonable requests. We may also condition this
accommodation, if appropriate, by asking you for information as to how payment
will be handled or specification of an alternative address or other method of
contact. We will not request an explanation from you as to the basis
for the request. Please contact our Privacy Officer to make such a
request.
C.
You Have the Right to Inspect and Copy Your PHI.
This means you may inspect and obtain a copy of your PHI that is contained in a
designated record set for as long as we maintain the PHI. A
"designated record set" contacts medical and billing records and any
other records that our practice uses for making decisions about
you.
You may not inspect or obtain a copy of the following records: psychotherapy
notes; information compiled in reasonable anticipation of, or use in, a civil,
criminal, or administrative action or proceeding, and PHI that is subject to
law that prohibits access to protected health information. To
discuss your right to inspect and copy your PHI, please see our Privacy
Officer.
D.
You Have the Right to Have Your Physician Amend Your PHI.
You may request that we amend your PHI in a designated record set for as long
as we maintain this information. All requests should be in
writing. Please speak with the Privacy Officer if you have any
questions or would like to request an amendment of your PHI.
E.
You Have the Right to Receive an Accounting of Certain Disclosures We Have
Made, if any, of Your PHI.
This right applies to disclosures for purposes other than treatment, payment or
health care operations as described in this Notice of Privacy
Practices. It also excludes disclosures we may have made to you or
for which we have an authorization from you and disclosures made to family members
or friends involved in your care. You have the right to receive
specific information regarding these disclosures that occurred after April 14,
2003. The right to receive this information is subject to certain
exceptions, restrictions and limitations. Please contact our
Privacy Office to request an accounting.
F.
You Have the Right to Obtain a Paper Copy of this notice From Us.
You have the right to receive a paper copy of this notice upon request, even if
you have agreed to accept this notice electronically.
III.
Complaints
You have
the right to complain to us or to the Secretary of Health and Human Services if
you believe your privacy rights have been violated by us. You may
file a complaint with us by notifying our Privacy Officer of your complaint.
We will not take any action against you or deny you medical care for filing a
complaint.
You may
contact our Privacy Officer at (610) 432-8551 or at 311 South Cedar Crest
Boulevard, Allentown, PA 18103 for further information about the complaint
process.
You may
complain to the Secretary of Health and Human Services at Region III, Office
for Civil Rights, U. S. Department of Health and Human
Services, 150 S. Independence Mall West, Suite 372, Public Ledger
Building, Philadelphia, PA 19106-9111.
Effective
Date.
This Notice of Privacy Practices is effective on April 14, 2003.