HIPAA Privacy Policy
Notice of Privacy Practices
Of Raleigh Children and Adolescents Medicine
This Notice Describes How Medical Information About You
May Be Used And Disclosed and How You Can Get Access to
This Information. Please Review It Carefully.
Effective: April 14, 2003
If you have any questions or requests, please contact any
of your physicians at
Raleigh Children and Adolescents Medicine.
TABLE OF CONTENTS
- We have a legal duty to protect health information about
you.
- We may use and disclose PHI about you in the following
circumstances:
- We may use and disclose PHI about you to provide health
care treatment to you.
- We may use and disclose PHI
about you to obtain payment for services.
- We may use and disclose your PHI for health care
operations.
- We may use and disclose PHI under other circumstances
without your authorization.
- You can object to certain uses and disclosures.
- We may contact you to provide appointment reminders.
- We may contact you with information about treatment,
services, products or health care
providers.
- We may contact you for fundraising activities.
- You have several rights regarding PHI about you.
- You have the right to request restrictions on uses and
disclosures of PHI about you.
- You have the right to request different ways to
communicate with you.
- You have the right to see and copy PHI about you.
- You have the right to request amendment of PHI about
you.
- You have the right to a listing of disclosures we have
made.
- You have a right to a copy of this Notice.
- You may file a complaint about our privacy practices.
- Effective date.
- WE HAVE A LEGAL DUTY TO PROTECT HEALTH INFORMATION ABOUT
YOU.
We are required to protect the privacy of health
information about you and that can be identified with you,
which we call "protected health information," or "PHI " for
short. We must give you notice of our legal duties
and privacy practices concerning PHI :
- We must protect PHI that we have created or received
about your past, present, or future health
condition, health care we provide to you, or payment for
your health care.
- We must notify you about how we protect PHI about you.
- We must explain how, when and why we use and/or disclose
PHI about you.
- We may only use and/or disclose PHI as we have described
in this Notice.
This Notice describes the types of uses and disclosures
that we may make and gives you some examples. In
addition, we may make other uses and disclosures which
occur as a byproduct of the permitted uses and
disclosures described in this Notice.
We are required to follow the procedures in this Notice. We
reserve the right to change the terms of this Notice
and to make new notice provisions effective for all PHI
that we maintain by first:
- Posting the revised notice in our offices;
- Making copies of the revised notice available upon
request (either at our offices or through the contact
person listed in this Notice); and
- Posting the revised notice on our web site
- WE MAY USE
AND DISCLOSE PHI ABOUT YOU WITHOUT YOUR AUTHORIZATION IN
THE FOLLOWING CIRCUMSTANCES:
- We may use and disclose PHI about you to provide health
care treatment to vou. It is the policy of RCAM
though to request such permission for you on your first
visit to our office.
We may use and disclose PHI about you to provide,
coordinate or manage your health care and related services.
This may include communicating with other health care
providers regarding your treatment and coordinating
and managing your health care with others. For example, we
may use and disclose PHI about you when you
need a prescription, lab work, an x-ray, or other health
care services. In addition, we may use and disclose PHI
about you when referring you to another health care
provider.
Example: A doctor treating you for a broken leg may need to
know if you have diabetes because
diabetes may slow the healing process. In addition, the
doctor may need to tell the dietitian if you have
diabetes so that we can arrange for appropriates meals.
Departments of the hospital may also need to share
your pm in order to coordinate different services you may
need, such as prescriptions, lab work and x-rays.
We may also disclose PHI about you to people outside the
hospital who may be involved in your medical
care after you leave the hospital, such as home health
providers or others who may provide services that are
part of your care.
Example: Your doctor may share medical information about
you with another health care provider. For
example, if you are referred to another doctor, that doctor
will need to know if you are allergic to any
medications. Similarly, your doctor may share PHI about you
with a pharmacy when calling in a
prescription.
- We may use and disclose PHI about you to obtain pavment
for services.
Generally, we may use and give your medical information to
others to bill and collect payment for the treatment
and services provided to you. Before you receive scheduled
services, we may share information about these
services with your health plan(s). Sharing information
allow us to ask for coverage under your plan or policy
and for approval of payment before we provide the services.
We may also share portions of your medical
information with the following:
- Billing departments;
- Collection department or agencies;
- Insurance companies, health plans and their agents which
provide you coverage;
- Hospital department that review the care you received to
check that it and the costs associated with it
were appropriate for your illness or injury; and
- Consumer reporting agencies (e.g., credit bureaus).
Example: Let's say you have a broken leg. We may need to
give your health plan(s) information about
your condition, supplies used (such as plaster for your
cast or crutches), and services your received (such as x-rays or surgery). The information is given to our
billing department and your health plan so we can be
paid or you can be reimbursed. We may also send the same
information to our hospital department which
reviews our care of your illness or injury.
- We may use and disclose your PHI for health care
operations.We may use and disclose PHI in performing
business activities, which we call "health care
operations". These
"health care operations" allow use to improve the quality
of care we provide and reduce health care costs.
Examples of the way we may use or disclose PHI about you
for "health care operations" include the following:
- Reviewing and improving the quality, efficiency and cost
of care that we provide to you and our other
patients. For example, we may use PHI about you to develop
ways to assist our health care providers and staff in
deciding what medical treatment should be provided to
others.
- Improving health care and lowering costs for groups of
people who have similar health problems and to
help manage and coordinate the care for these groups for
people. We may use PHI to identify groups of
people with similar health problems to give them
information, for instance, about treatment alternatives,
classes, or new procedures.
- Reviewing and evaluating the skills, qualifications, and
performance of health care providers taking care
of you.
- Providing training programs for students, trainees,
health care providers or non-health care professionals
(for example, billing clerks or assistants, etc.) to help
them practice or improve their skills;
- Cooperating with outside organizations that assess the
quality of the care we and others provide. These
organizations might include government agencies or
accrediting bodies such as the Joint Commission on
Accreditation of Health care Organizations.
- Cooperating with outside organizations that evaluate,
certify or license health care providers, staff or
facilities in a particular field or specialty. For example,
we may use or disclose PHI so that one of our
nurses may become certified as having expertise in a
specific field of nursing, such as pediatric nursing.
- Assisting various people who review our activities. For
example, pm may be seen by doctors reviewing
the services provided to you, and by accountants, lawyers,
and others who assist us in complying with
applicable laws.
- Planning for our organizations' future operations, and
fundraising for the benefit or our organization.
- Conducting business management and general administrative
activities related to our organization and
the services it provides, including providing info.
- Resolving grievances within our organization.
- Reviewing activities and using or disclosing PHI in the
event that we sell our business, property or give
control of our business or property to someone else.
- Complying with this Notice and with applicable laws.
- We may use and disclose PHI under other circumstances
without your authorization.
We may use and/or disclose PHI about you for a number of
circumstances in which you do not have to consent,
give authorization or otherwise have an opportunity to
agree or object. Those circumstances include:
- When the use and/or disclosure is required by law. For
example, when a disclosure is required by
federal, state or local law or other judicial or
administrative proceeding.
- When the use and/or disclosure is necessary for public
health activities. For example, we may disclose
PHI about you if you have been exposed to a communicable
disease or may otherwise be at risk or
contracting or spreading a disease or condition.
- When the disclosure related to victims or abuse, neglect
or domestic violence.
- When the use and/or disclosure is for health oversight
activities. For example, we may disclose PHI about you to a
state or federal health oversight agency which is
authorized by law. to oversee our
operations.
- When the disclosure is for judicial and administrative
proceedings. For example, we may disclose PHI
about you in response to an order of a court or
administrative tribunal.
- When the disclosure is for law enforcement purposes. For
example, we may disclose PHI about you in
order to comply with laws that require the reporting of
certain types of wounds or other physical injuries.
- When the use and/or disclosure relates to decedents. For
example, we may disclose PHI about you to a
coroner or medical examiner for the purposes of identifying
if you should die.
- When the use and/or disclosure relates to cadaveric
organ, eye or tissue donations purposes.
- When the use and/or disclosure relates to medical
research. Under certain circumstances, we may
disclose PHI about you for medical research.
- When the use and/or disclosure is to avert a serious
threat to health or safety. For example, we may
disclose PHI about you to prevent or lessen a serious and
eminent threat to the health or safety of a
person or the public.
- When the use and/or disclosure relates to specialized
government functions. For example, we may
disclose PHI about you ifit relates to military and
veterans' activities, national security and intelligence
activities, protective services for the President, and
medical suitability or determinations of the
Department of State.
- When the use and/or disclosure relates to correctional
institutions and in other law enforcement custodial
situations. For example, in certain circumstances, we may
disclose PHI about you to a correctional
institution having lawful custody of you.
- You can object to certain uses and disclosures.
Unless you object, we may use or disclose PHI about you in
the following circumstances:
- We may share your name, your room number, and your
condition in our patient listing with clergy and
with people who ask for you by name. We also may share your
religious affiliation with clergy.
- We may share with a family member, relative, friend or
other person identified by you, PHI directly
related to that person's involvement in your care of
payment for your care. We may share with a family
member, personal representative or other person responsible
for your care PHI necessary to notify such
individuals or your location, general condition or death.
- We may share with a public or private agency (for
example, American Red Cross) PHI about you for
disaster relief purposes. Even if you object, we may still
share the PHI about you, if necessary for the
emergency circumstances.
If you would like to object to our use or disclosure of PHI
about you in the above circumstances, please call our
contact person listed on the cover page of this Notice.
- We may contact you to provide appointment reminders.
We may use and/or disclose PHI to contact you to provide a
reminder to you about an appointment you have for
treatment or medical care.
- We may contact you with information about treatment,
services, products or health care providers.
We may use and/or disclose PHI to manage or coordinate your
healthcare. This may include telling you about
treatments, services, products and/or other healthcare
providers. We may also use and/or disclose PHI to give
you gifts or a small value.
Example: If you are diagnosed with diabetes, we may tell
you about nutritional and other counseling
services that may be of interest to you. ** ANY OTHER USE
OR DISCLOSURE OF PHI ABOUT YOU
REQUIRES YOUR WRITTEN AUTHORIZATION **
Under any circumstances other than those listed above, we
will ask for your written authorization before we use
or disclose PHI about you. If you sign a written
authorization allowing us to disclose PHI about you in a
specific situation, you can later cancel your authorization
in writing. If you cancel your authorization in writing, we
will not disclose PHI about you after we receive your
cancellation, except for disclosures which
were being processed before we received your cancellation.
- YOU HAVE SEVERAL RIGHTS REGARDING PHI ABOUT YOU.
- You have the right to request restrictions on uses and
disclosures of PHI about you.
You have the right to request that we restrict the use and
disclosure of PHI about you. We are not required to
agree to your requested restrictions. However, even if we
agree to your request, in certain situations your
restrictions may not be followed. These situations include
emergency treatment, disclosures to the Secretary of
the Department of Health and Human Services, and uses and
disclosure described in subsection 4 of the
previous section of this Notice. You may request a
restriction by submitting a written request to our Privacy
Official, .
- You have the right to request different ways to
communicate with you.
You have the right to request how and where we contact you
about PHI. For example, you may request that we
contact you at your work address or phone number. Your
request must be in writing. We must accommodate
reasonable requests, but, when appropriate, may condition
that accommodation on your providing us with information
regarding how payment, if any, will be handled and your
specification or an alternative address or other method of
contact. You may request alternative communications by
submitting a written request to our
Privacy Official .
- You have the right to see and copy PHI about you.
You have the right to request to see and receive a copy of
PHI contained in clinical, billing and other records
used to make decisions about you. Your request must be in
writing. We may charge you related fees. Instead
of providing you with a full copy of the PHI, we may give
you a summary or explanation of the PHI about you,
if you agree in advance to the form and cost of the summary
or explanation. There are certain circumstances,
we will respond to you in writing, stating why we will not
grant your request and describing any rights you may
have to request a review of our denial. You may request to
see and receive a copy of PHI submitting a
written request to our Privacy Official, .
- You have the right to request amendment of PHI about you.
You have the right to request that we make amendments to
clinical, billing and other records used to make
decisions about you. Your request must be in writing and
must explain your reason( s) for the amendment. We
may deny your request if: 1) the information was not
created by us (unless you prove the creator of the
information is no longer available to amend the record); 2)
the information is not part of the records used to
make decisions about you; 3) we believe the information is
correct and complete; or 4) you would not have the
right to see and copy the record as described in paragraph
3 above. We will tell you in writing the reasons for
the denial and describe your rights to give us a written
statement disagreeing wit the denial. If we accept your
request to amend the information, we will make reasonable
efforts to inform others of the amendment, including
persons you name who have received PHI about you and who
need the amendment. You may request an
amendment of your PHI by submitting a written request to
our Privacy Official.
- You have the right to a listing of disclosures we have
made.
If you ask our contact person in writing, you have the
right to receive a written list of certain of our
disclosures
of PHI about you. You may ask for disclosures made up to
six (6) years before your request (not including
disclosures made prior to April 14, 2003). We are required
to provide a listing of all disclosures except the
following:
- For your treatment
- For billing and collection of payment for your treatment
- For our health care operations
- Made to or requested by you, or that you authorized.
- Occurring as a byproduct of permitted uses and disclosures
- Made to individuals involved in your care, for directory
or notification purposes, or for other purposes
described in subsection B.5 above.
- Allowed by law when the use and/or disclosure relates to
certain specialized government functions or
relates to correctional institutions and in other law
enforcement custodial situations (please see
subsection B.4 above) and
- As part of a limited set of information which does not
contain certain information which would identify
you.
The list will include the date of the disclosure, the name
(and address, if available) of the person or organization
receiving the information, a brief description of the
information disclosed, and the purpose of the disclosure,
If, under permitted circumstances, disclosures made prior to
April 14, 2003). We are required to provide a listing of
all disclosures except the
following:
- For your treatment
- For billing and collection of payment for your treatment
- For our health care operations
- Made to or requested by you, or that you authorized.
- Occurring as a byproduct of permitted uses and disclosures
- Made to individuals involved in your care, for directory
or notification purposes, or for other purposes
described in subsection B.5 above.
- Allowed by law when the use and/or disclosure relates to
certain specialized government functions or
relates to correctional institutions and in other law
enforcement custodial situations (please see
subsection B.4 above) and
- As part of a limited set of information which does not
contain certain information which would identify
you
The list will include the date of the disclosure, the name
(and address, if available) of the person or organization
receiving the information, a brief description of the
information disclosed, and the purpose of the disclosure,
If,
under permitted circumstances, PHI about you have been
disclosed for certain types of research projects, the list
may include different types of information..
If you request a list o( disclosures more than once in 12
months, we can charge you a reasonable fee. You may
request a listing of disclosures by submitting a written
request to our Privacy Official.
- You have the right to a copy of this Notice.
You have the right to request a paper copy of this Notice
at any time on or after April 14, 2003. We will
provide a copy of this Notice no later than the date you
first receive service from us (except for emergency
services, and then we will provide the Notice to you as
soon a possible.
- YOU MAY FILE A COMPLAINT ABOUT OUR PRIVACY PRACTICES.
If you think your privacy rights have been violated by us,
or you want to complain to us about our privacy
practices, you can contact the person listed below:
Deborah Maness, Privacy Official
2800 Blue Ridge Road, Suite 401
Raleigh, North Carolina 27607
Telephone: (919) 781-7490, Fax: (919) 784-0903
You may also send a written complaint to the United States
Secretary of the Department of Health and Human
Services.
If you file a complaint, we will not take any action
against you or change our treatment of you in any way.
- EFFECTIVE DATE OF THIS NOTICE
This Notice of Privacy Practices is effective April 14,
2003.
Copyright ~ 2002 by the North Carolina Healthcare
Information and Communications Alliance, Inc. (NCHICA), no
claim to original U.S. Government Works. Any
use of this document by any person is expressly subject to
the user's acceptance of the terms of the User Agreement
and Disclaimer that applies to this document, which
may be found at
http://www.nchica.org/HIPAAResources/Samples/
and which is available from NCHICA upon request.