HIPAA Notice

Medical Provider Notices of Privacy Practices (NPP)

Last updated May 25, 2021

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

“We,” “us,” and “our” refers to, and this Notice applies to, medical groups that provide healthcare services and laboratories. These medical groups may employ or contract with physicians, allied health professionals, and mental health professionals who offer certain healthcare and/or mental health services.

1. Your Rights.

This section explains your rights and some of our responsibilities to help you. Please contact us via email to exercise any of these rights, or with all and any questions and concerns.

• Request a copy of your records. Ask for a copy of your test result as well as other PHI that was obtained during the process of registration and testing.

• Request a correction to your records. Ask us to correct your health and claims records if you think they are incorrect or incomplete.

• Request confidential communications. Ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address.

• Restriction request. We reserve the right to decline such requests unless the requested restriction involves disclosure to a health plan and you have paid for the services out of pocket.

• Provide access to a trusted party. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.

• Request a list of those with whom we’ve shared information. Ask us for a list (accounting) of the times we’ve shared your health information for six years prior to the date you ask, who we shared it with, and why. This request has to be presented in writing.

• Request a copy of this notice. Ask us for a paper copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy promptly.

2. Our Uses and Disclosures.

The Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH) set the standard for sensitive patient data protection. We typically use or share your health information in the following ways:

• Help manage the health care treatment you receive. We can use your health information and share it with professionals who are treating you.

• Pay for your health services. We can use and disclose your health information as we pay for your health services.

• Comply with the law and help with public health and safety issues. We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.

• Respond to lawsuits and legal actions. We can share health information about you in response to a court or administrative order, or in response to a subpoena.

• Do research. We can use or share your information for health research.

3. Our Responsibilities.

• We are required by law to maintain the privacy and security of your protected health information.

• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.

• We must follow the duties and privacy practices described in this notice and give you a copy of it.

• We will not use or share your information other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

Changes to the Terms of This Notice

We reserve the right to change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, on our website, and we will mail a copy to you.

For more information:

www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.