HIPAA Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
1.Our Commitment to Your Privacy
Firm Hill Cardiometabolic Center is committed to protecting the privacy and security of your protected health information (“PHI”).
We are required, where applicable, to maintain the privacy of PHI, provide individuals with notice of our legal duties and privacy practices, and comply with the terms of our currently effective Notice of Privacy Practices.
We are also required to notify affected individuals following a breach of unsecured PHI as required by applicable law.
2.How We May Use and Disclose Your Health Information
Treatment
We may use and disclose your health information to provide, coordinate, and manage your medical care.
Examples include communicating with laboratories, pharmacies, consulting physicians, and other healthcare professionals involved in your treatment.
Payment
We may use and disclose information as necessary to obtain payment for healthcare services, including insurance claims, billing, payment processing, and eligibility verification.
Healthcare Operations
We may use and disclose information for permitted healthcare operations, including quality improvement, compliance, credentialing, auditing, professional review, and administrative management.
Other Uses Permitted or Required by Law
Subject to applicable requirements and limitations, we may disclose information for public health activities, health oversight, judicial or administrative proceedings, certain law enforcement purposes, workers' compensation, reporting obligations, and other legally authorized activities.
We may also disclose information to avert a serious threat to health or safety where legally permitted.
Individuals Involved in Your Care
Where permitted by law, we may share relevant information with family members, personal representatives, or others involved in your care or payment for your care, taking into account applicable patient preferences and restrictions.
Business Associates
We may disclose PHI to authorized service providers performing functions on our behalf when permitted by law and subject to required safeguards and agreements.
4.Specially Protected Information
Certain categories of information may be subject to additional federal or state protections.
Where applicable, we will comply with restrictions governing specially protected records, including records subject to 42 CFR Part 2.
Any Part 2-specific provisions, including restrictions on use in proceedings, consent, redisclosure, and required notice language, must be incorporated in accordance with the current applicable regulations and the Practice's actual record-handling activities.
This notice does not override stronger protections imposed by law.
5.Your Rights Regarding Your Health Information
Right to Inspect and Obtain a Copy
You may request access to your health information maintained in a designated record set, subject to applicable exceptions.
Right to Request an Amendment
You may request correction or amendment of information you believe is inaccurate or incomplete.
Right to Request Restrictions
You may request restrictions on certain uses or disclosures.
We are not required to agree to every requested restriction. However, where applicable, we must honor a qualifying request not to disclose information to a health plan for payment or healthcare operations when the information concerns an item or service paid for in full out of pocket and the disclosure is not otherwise required by law.
Right to Request Confidential Communications
You may request that we communicate with you through alternative means or at alternative locations.
Right to an Accounting of Disclosures
You may request an accounting of certain disclosures, subject to applicable rules and exceptions.
Right to a Paper Copy
You may obtain a paper copy of this notice upon request, even if you previously agreed to receive it electronically.
Right to File a Complaint
You may submit a complaint to Firm Hill or the U.S. Department of Health and Human Services if you believe your privacy rights have been violated.
You will not be retaliated against for filing a complaint.
6.Telemedicine and Electronic Health Records
Firm Hill provides clinical services primarily through telemedicine.
Health information may be created, maintained, transmitted, and accessed through authorized electronic systems, including our designated Tebra clinical platform.
We apply appropriate privacy and security safeguards to electronic health information as required by applicable law.
7.Our Legal Duties
We are required to:
- Protect PHI in accordance with applicable law.
- Provide this Notice of Privacy Practices.
- Follow the terms of the notice currently in effect.
- Respect applicable patient privacy rights.
- Notify affected individuals of reportable breaches as required by law.
We reserve the right to revise our privacy practices and this notice as permitted by law.
Revised notices will be made available through appropriate channels, including our website.
8.Privacy Complaints
You may contact the Practice's designated Privacy Officer:
Firm Hill Cardiometabolic Center
Privacy Officer: name — pending
Email: privacy email — pending
Telephone: 830 444 4477
Address: mailing address — pending
You may also submit a complaint to the U.S. Department of Health and Human Services, Office for Civil Rights, through its official complaint process.
9.Availability of This Notice
A copy of this notice is available on our website and upon request.
Patients will receive the notice and acknowledgment opportunity as required by applicable law.
Required Final Review: Reconcile this draft with the current HHS HIPAA healthcare provider model notice, including all applicable Part 2 provisions, special restrictions, complaint information, and patient rights before publication.