Joint Notice of Privacy Practices
Effective Date: September 20, 2013
DUNCAN REGIONAL HOSPITAL JOINT NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Duncan Regional Hospital (DRH), DRH entities, DRH medical staff members, and other health care providers who render care at DRH constitute an organized health care arrangement. The members of this arrangement are committed to protecting your medical information. We are required by law to:
- Maintain the privacy of your medical information;
- Give you a notice of our legal duties and privacy practices with respect to your medical information; and
- Follow the terms of the notice currently in effect.
WHAT IS THIS DOCUMENT?
This Joint Notice of Privacy Practices describes how we may use and disclose your medical information. It also describes your rights to access and control your medical information.
WHAT DOES THIS NOTICE COVER?
This Joint Notice of Privacy Practices applies to all of your medical information used to make decisions about your care that we generate or maintain, including sensitive information such as mental health, communicable disease and drug and alcohol abuse information. It applies to your medical information in written and electronic form. Different privacy practices may apply to your medical information that is created or kept by other people or entities.
This Notice of Privacy Practices will be followed by aII DRH team members; any health care professional who provides treatment to you at DRH or DRH entities; and any member of a volunteer group that provides services at DRH or DRH entities.
WHAT WILL YOU DO WITH MY MEDICAL INFORMATION?
The following categories describe the ways that we may use and disclose your medical information without obtaining your prior written authorization. Not every use or disclosure in a category will be listed.
If you are concerned about a possible use or disclosure of any part of your medical information, you may request a restriction. Your right to request a restriction is described in the section below regarding patient rights.
We will use your medical information to provide you with medical treatment and services.
We maintain medical information about our patients in an electronic medical record that allows us to share medical information for treatment purposes. This facilitates access to medical information by other health care providers who provide care to you.
Example: Your medical information may be disclosed to doctors, nurses, technicians, students or other personnel who are involved in taking care of you.
We may disclose your medical information for the treatment activities of any other health care providers.
Example: We may send a copy of your medical record to a physician who needs to provide follow-up care.
We may use medical information about you for our payment activities. Common payment activities include, but are not limited to:
- Determining eligibility or coverage under a plan; and
- Billing and collection activities.
Example: Your medical information may be released to an insurance company to obtain payment for services.
We may disclose medical information about you to another health care provider or covered entity for its payment activities.
Example:. We may send your health plan coverage information to an outside laboratory that needs the information to bill for tests that is provided to you.
We may use your medical information for operational or administrative purposes. These uses are necessary to run our business and to make sure patients receive quality care. Common operation activities include, but are not limited to:
- Conducting quality assessment and improvement activities;
- Reviewing the competence of health care professionals;
- Arranging for legal or auditing services;
- Business planning and development;
- Business management and administrative activities; and
- Communicating with patients about our services.
Examples: (1) We may use your medical information to conduct internal audits to verify that billing is being conducted properly. (2) We may use your medical information to contact you for the purposes of conducting patient satisfaction surveys or to follow-up on the services we provided.
We may disclose medical information about you to another health care provider or covered entity for its operation activities under certain circumstances.
HEALTH INFORMATION EXCHANGE
We participate in a health information exchange (HIE). Generally, an HIE is an organization in which providers exchange patient information in order to facilitate health care, avoid duplication of services (such as tests) and to reduce the likelihood that medical error will occur. By participating in an HIE, we may share your health information with other providers that participate in the HIE or participants of other health information exchanges. If you do not want your medical information to be available through the HIE, you must complete the opt-out form that’s provided at the back of this notice and mail or fax the form to the HIE.
We may disclose your medical information to other entities that provide a service to us or on our behalf that requires the release of patient medical information. However, we only will make these disclosures if we have received satisfactory assurance that the other entity will properly safeguard your medical information.
Example: We may contract with another entity to provide transcription or billing services.
We may use and disclose your medical information to tell you about or recommend possible treatment options or alternatives that may be of interest to you.
Individuals Involved in Your Care or Payment for Your Care. We may release medical information about you to a friend, family member or legal guardian who is involved in your medical care. We may tell your family or friends your condition and that you are in the hospital. In addition, we may disclose medical information about you to an entity assisting in a disaster relief effort so that your family can be notified about your condition, status and location.
HEALTH-RELATED BENEFITS AND SERVICES
We may use and disclose medical information to tell you about health-related benefits or services that may be of interest to you.
We may include certain information about you in our directory while you are a patient at DRH. This information may include your name, location in DRH, your general condition and your religious affiliation. The directory information, except for your religious affiliation, may be released to people who ask for you by name. Your religious affiliation may be given to a member of the clergy, such as a minister, priest or rabbi, even if they do not ask for you by name. This is so your family, friends and clergy can visit you in the hospital and generally know how you are doing. If you do not want to be in our directory, you will need to notify DRH personnel at registration. You will be asked to complete an “opt out” form.
We may use and disclose medical information about you to researchers. In most circumstances, you must sign a separate form specifically authorizing us to use and/or disclose your medical information for research. However, there are certain exceptions. Your medical information may be disclosed without your authorization for research if the authorization requirement has been waived or altered by a special committee that is charged with ensuring that the disclosure will not pose a great risk to your privacy or that measures are being taken to protect your medical information. Your medical information also may be disclosed to researchers to prepare for research as long as certain conditions are met. Medical information regarding people who have died can be released without authorization in certain circumstances. Limited medical information may be released to a researcher who has signed an agreement promising to protect the information released.
ORGAN AND TISSUE DONATION
If you are an organ donor, we may release medical information to organizations that handle organ procurement or organ, eye or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.
We may use medical information about you to contact you in the future to raise money for DRH. We may disclose medical information to a foundation related to DRH so that the foundation may contact you to raise money on our behalf. We only will release limited information, such as your name, address and phone number, the dates you received treatment or services at DRH, the department in which you received services, your treating physician and your health insurance status for fundraising purposes. Each solicitation will include information on how to opt-out of receiving further fundraising communications from DRH. You also may notify DRH at any time at DRH Health Foundation, P.O. Box 2000, Duncan OK 73534 to opt-out of receiving further fundraising communications.
CAN YOU EVER USE AND DISCLOSE MY MEDICAL INFORMATION WITHOUT MY AUTHORIZATION?
Yes. The following categories describe the ways that we may be required to use and disclose your medical information without your authorization. Not every use or disclosure in a category will be listed.
REQUIRED BY LAW
We may disclose your medical information when required to do so by federal, state or local law.
Examples: (1) We may release your medical information for workers’ compensation or similar programs. (2) We are required by law to report cases of suspected abuse and neglect. These reports may include your medical information.
We may use and disclose medical information about you when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person. Any disclosure would only be to someone able to help prevent the threat.
We may disclose medical information about you public health activities intended to:
- Prevent or control disease, injury or disability;
- Report births and deaths;
- Report abuse, neglect or violence as required by law;
- Report reactions to medications or problems with products;
- Notify people of recalls of products they may be using; or
- Notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition.
FOOD AND DRUG ADMINISTRATION (FDA)
We may disclose to the FDA and to manufacturers health information relative to adverse events with respect to food, supplements, product and product defects, or post-marketing surveillance information to enable product recalls, repairs or replacements.
HEALTH OVERSIGHT ACTIVITIES
We may disclose medical information to a health oversight agency for activities authorized by law. These oversight activities include, for example, audits, investigations, inspections, and licensure.
LAWSUITS AND DISPUTES
If you are involved in a lawsuit or a dispute, we may disclose medical information about you in response to a court or administrative order. In limited circumstances, we may disclose medical information about you in response to a subpoena or discovery request.
We may release medical information if asked to do so by law enforcement official:
- In response to a court order, warrant, summons or other similar processes;
- To identify or locate a suspect, fugitive, material witness, or missing person;
- About the victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement;
- About a death we believe may be the result of criminal conduct;
- About criminal conduct at the hospital; and
- In emergency circumstances to report a crime; the location of the crime or victims; or the identity, description or location of the person who committed the crime.
CORONERS, MEDICAL EXAMINERS, AND FUNERAL DIRECTORS
We may release medical information to a coroner, a medical examiner or a funeral director.
NATIONAL SECURITY AND INTELLIGENCE ACTIVITIES
We may release medical information about you to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.
PROTECTIVE SERVICES FOR THE PRESIDENT AND OTHERS
We may disclose medical information about you to authorized federal officials so they may provide protection to the President, other authorized persons or foreign heads of state or conduct special investigations.
If you are a member of the armed forces we may disclose your medical information as required by military command authorities
If you are an inmate of a correctional facility or under the custody of a law enforcement official or agency, we may release your medical information to the correctional facility or law enforcement official or agency.
WHAT IF YOU WANT TO USE AND/OR DISCLOSE MY MEDICAL INFORMATION FOR A PURPOSE NOT DESCRIBED IN THIS NOTICE?
We must obtain a separate, specific authorization from you to use and/or disclose your medical information for any purpose not covered by this notice or the laws that apply to us.
If you provide us with authorization to use or disclose your medical information, you may revoke the authorization, in writing, at any time. If you revoke your authorization, we will not use or disclose your medical information for the reasons covered by your authorization. However, your revocation will not apply to disclosures already made by us in reliance on your authorization.
Your authorization is required for the following purposes:
- Psychotherapy notes. We must obtain your authorization to use or disclose notes maintained by a mental health professional about a counseling session.
- Sale of Medical Information. We must obtain your authorization virtually any time we intend to sell your medical information, with minor exceptions.
- Marketing. We must obtain your authorization to communicate with your about a particular product or service virtually any time we are paid to make the communication, with minor exceptions.
WHAT ARE MY RIGHTS REGARDING MY MEDICAL INFORMATION
You have the rights described below in regard to the medical information that we maintain about you. You are required to submit a written request to exercise any of these rights. You may contact our medical record department or Privacy Officer to obtain a form that you can use to exercise any of the rights listed below.
RIGHT TO INSPECT AND COPY
You have the right to inspect and obtain a copy of medical information used to make decisions about your care. We will provide you with access to your medical information in the form or format requested if it is available in such a format. We may charge a fee for the costs of copying, mailing, or other supplies associated with your request. Fees will be in accordance with Oklahoma statutes. We may deny your request to inspect and/or copy your medical information in certain circumstances. If you are denied access, you may request that the denial be reviewed. A licensed health care professional chosen by us will review your request and the denial. The person conducting the review will not be the person who denied your original request. We will comply with the outcome of the review.
RIGHT TO AMEND
If you feel that medical information that we created is incorrect or incomplete, you may submit a request for an amendment for as long as we maintain the information. You must provide a reason that supports your amendment request.
We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask to amend information that:
- We did not create, unless the person or entity that created the information is not available to make the amendment;
- Is not part of the medical information that we maintain;
- Is not part of the information that you would be permitted to inspect and copy; or
- Is accurate and complete.
RIGHT TO AN ACCOUNTING OF DISCLOSURES
You have the right to request one free “accounting of disclosures” every 12 months. This is a list of certain disclosures we made of your medical information. There are several categories of disclosures that we are not required to list in the accounting. For example, we do not have to keep track of disclosures that are authorized. Your request must state a time period, which may not be longer than 6 years and may not include dates before April 14, 2003.
If you request more than one accounting in a 12-month period, we may charge you for the costs of providing the list. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.
RIGHT TO REQUEST RESTRICTIONS
You have the right to request a restriction or limitation on the medical information we use or disclose about you unless our use and/or disclosure is required by law. You also have the right to request a limit on the medical information we disclose about you to someone who is involved in your care or the payment for your care, like a family member or friend.
We are not required to agree to your request unless you are requesting a restriction on the disclosure of information to your health plan and you pay out of pocket for the medical treatment provided. If we agree to a restriction, we will comply with your request unless the information is needed to provide emergency treatment to you.
In your request, you must indicate:
- The type of restriction you want and the information you want restricted; and
- To whom you want the limits to apply, for example, your spouse.
RIGHT TO REQUEST CONFIDENTIAL COMMUNICATIONS
You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that we only contact you at work or by mail.
We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.
RIGHT TO A PAPER COPY OF THIS NOTICE
You have the right to a paper copy of this notice. Copies of this notice always will be available in our medical record department and all registration areas.
CAN YOU CHANGE THIS NOTICE
We reserve the right to change this notice. We reserve the right to make the revised or changed notice effective for medical information we already have about you as well as any information we receive in the future. Copies of the current notice will be posted at DRH and will be available for you to pick up on each visit to DRH.
WHAT HAPPENS IF MY MEDICAL INFORMATION IS USED BY OR DISCLOSED TO A PERSON OR ENTITY THAT SHOULD NO HAVE ACCESS TO IT
We are required to notify you of any acquisition, access, use, or disclosure of your medical information that is inconsistent with the federal law governing the protection of medical information (known has HIPAA).
WHAT IF I HAVE QUESTIONS OR NEED TO REPORT A PROBLEM
If you believe your privacy rights have been violated, you may file a complaint with us or with the Office of Civil Rights of the Department of Health and Human Services. To file a complaint with us, or if you would like more information about our privacy practices, contact our Privacy Officer at 580-251-8665 or by email at firstname.lastname@example.org. Privacy Officer’s mailing address is: P.O. Box 2000, Duncan, OK 73533. To file a complaint with the Office of Civil Rights of the Department of Health and Human Services, you must submit the complaint within 180 days of when you knew or should have known of the circumstance that led to the complaint. The complaint must be submitted in writing. record department or registration areas. Information on how to file a complaint can be located on the Office of Civil Rights website at: http://www.hhs.gov/ocr/privacy/index.html or our Privacy Officer can provide you with current contact information. You will not be penalized for filing a complaint.