NOTICE OF HIPAA PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

If you have any questions about this notice, please call 314-888-5233.

The effective date of this Privacy Notice is January 1, 2019

My Catholic Doctor PLLC and its affiliated entities respects the privacy and confidentiality of your health information. This Notice of Privacy Practices (“Notice”) describes how we may use and disclose your health information and how you can get access to this information. This Notice applies to uses and disclosures we may make of all your health information whether created or received by us.

I. Our Responsibilities to You

We are required by law to:

1. Maintain the privacy of your health information and to provide you with notice of our legal duties and privacy practices.

2. Comply with the terms of our current Notice.

We reserve the right to change our practices and to make the new provisions effective for all health information we maintain. Should we make material changes, revised notices will be made by posting in the various My Catholic Doctor offices and on My Catholic Doctor’s website. Copies of the revised notice will also be available by mail from the Privacy Officer, Dr. Kathleen M. Berchelmann, M.D., My Catholic Doctor, P.L.L.C., 373 S. Willow St., Manchester, NH 03103.

II. How My Catholic Doctor May Use or Disclose Your Health Information

A. For Treatment, Payment and Healthcare Operations

1. For Treatment. My Catholic Doctor may use and disclose your health information to provide you with treatment and services and to coordinate your continuing care. Your health information may be used by doctors, counselors, dentists, and nurses, as well as by lab technicians, dieticians, specialists or others involved in your care, both within and outside My Catholic Doctor. For example, your doctor will share your health information with a pharmacist to fill a prescription for you or your primary care doctor will share overall health information about you with a doctor treating you for an injury.

2. For Payment. My Catholic Doctor may use and disclose your health information to others for purposes of receiving payment for treatment and services that you receive. For example, a bill may be sent to you or a third-party payor, such as an insurance company or health plan. The information on the bill may contain information that identifies you, your diagnosis, and treatment or supplies used in the course of treatment.

3. For Health Care Operations. My Catholic Doctor may use and disclose health information about you for operational purposes. For example, your health information may be disclosed to members of the medical staff, risk or quality improvement personnel, and others to:

– Evaluate the performance of our staff;
– Assess the quality of care and outcomes in your case and similar cases;
– Learn how to improve our facilities and services; and
– Determine how to continually improve the quality and effectiveness of the health care we provide.

B. Other Uses and Disclosures We May Make Without Your Written Authorization

1. Appointments. My Catholic Doctor may use your information to provide appointment reminders to you. My Catholic Doctor may contact you by phone, email (if you provided an email address), text message (if you agreed to receive text messages), mail, or via the patient portal. You may request, in writing, that My Catholic Doctor not use one or more of those methods for providing appointment reminders.

2. Required by Law. My Catholic Doctor may use and disclose information about you as required by law.

3. Persons Involved in Your Care or Payment for Your Care. Unless you object, we may disclose health information about you to a family member, close personal friend or other person you identify who are involved in your care. These disclosures are limited to information relevant to the person’s involvement in your care or in arranging payment for your care.

4. Public Health Activities. We may disclose your health information for public health activities. Examples of these activities include: 1.) to prevent and control disease, injury or disability; 2.) to report problems with medications; and 3) to report immunizations to the CT Immunization Registry and Tracking System (CIRTS) registry.

5. Reporting Victims of Abuse, Neglect or Domestic Violence. If we believe that you have been a victim of abuse or neglect, we may disclose your health information to notify a government authority.

6. Health Oversight Activities. We may disclose your health information to a health oversight agency for activities authorized by law. A health oversight agency is a state or federal agency that oversees the health care system. Some of the activities may include, for example, audits, investigations, inspections and licensure actions.

7. Judicial and Administrative Proceedings. We may disclose your health information in response to a court or administrative order. We also may disclose information in response to a subpoena, discovery request, or other lawful process.

8. Law Enforcement. We may disclose your health information for certain law enforcement purposes, including, for example, to file reports required by law or to report emergencies or suspicious deaths; to comply with a court order, warrant, or other legal process; to identify or locate a suspect or missing person; or to answer certain requests for information concerning crimes.

9. Coroners, Medical Examiners, Funeral Directors, Organ Procurement Organizations. We may release your health information to a coroner, medical examiner, funeral director and, if you are an organ donor, to an organization involved in the donation of organs and tissue.

10. To Avert a Serious Threat to Health or Safety. When necessary to prevent a serious threat to your health or safety, or the health or safety of the public or another person, we may use or disclose your health information to someone able to help lessen or prevent the threatened harm.

11. Fundraising. We may use limited protected health information to contact you for fundraising purposes. You have the right to opt out of receiving such communications.

12. Military and Veterans. If you are a member of the armed forces, we may use and disclose your health information as required by military command authorities.

13. National Security and Intelligence Activities; Protective Services for the President and Others. We may disclose health information to authorized federal officials conducting national security and intelligence activities or as needed to provide protection to the President of the United States, certain other persons or foreign heads of states or to conduct certain special investigations.

14. Inmates/Law Enforcement Custody. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may disclose your health information to the institution or official for certain purposes including your own health and safety as well as that of others.

15. Workers’ Compensation. We may use or disclose your health information to comply with laws relating to workers’ compensation or similar programs.

16. Disaster Relief. We may disclose health information about you to an organization assisting in a disaster relief effort.

17. Treatment Alternatives and Health-Related Benefits and Services. We may use or disclose your health information to inform you about treatment alternatives and health-related benefits and services that may be of interest to you.

18. Business Associates. We may disclose your health information to our business associates under a Business Associate Agreement.

19. Research. My Catholic Doctor may use your health information for research purposes when an institutional review board or privacy board has reviewed the research proposal established protocols and has approved the research to ensure the privacy of your health information.

20. Health Information Exchange. My Catholic Doctor utilizes an electronic health exchange that allows it to share clinical information with other doctors, nurses, hospitals, and healthcare facilities. The program assists in providing the best possible care by allowing providers outside of My Catholic Doctor to see your clinical information. This includes your current and past medical, behavioral health, and dental records at My Catholic Doctor. Healthcare providers and authorized personnel that participate in the electronic health exchange will be able to access your health information more effectively and accurately. If you do not wish to be enrolled in the electronic health exchange, please request an opt-out form.

C. Your Written Authorization is Required for All Other Uses or Disclosures of Your Health Information

1. We will obtain your written authorization, also known as a Release of Information, (“Authorization”) prior to making any use or disclosure other than those described above. Most uses and disclosures of psychotherapy notes, uses and disclosures of your protected health information that are made for marketing purposes or disclosures that constitute a sale of protected health information require your written authorization.

2. An Authorization is designed to inform you of a specific use or disclosure (other than those described above) that we plan to make of your health information. The Authorization describes the particular health information to be used or disclosed and the purpose of the use or disclosure. Where applicable, the Authorization will also specify the name of the person to whom we are disclosing the information. The Authorization will also contain an expiration date or event.

3. You may revoke an Authorization previously given by you at any time but you must do so in writing. If you revoke your Authorization, we will no longer use or disclose your health information for those purposes specified in the Authorization except where we have already taken action in reliance on your Authorization.

D. Your Rights Regarding Your Health Information

1. Right to Request Restrictions. You have the right to request that we restrict the way we use or disclose your health information for treatment, payment or health care operations. However, we are not required to agree to the restriction except under limited circumstances. For example, we must agree to your request to restrict disclosures about you to your health plan for purposes of payment or healthcare operations that are not required by law if the information pertains solely to a health care item or service for which you have paid us in full out of pocket. If we do agree to a restriction, we will honor that restriction except in the event of an emergency.

2. Right to Request Confidential Communications. You have the right to request that we communicate with you concerning your health matters in a certain manner or at a certain location. For example, you can request that we contact you only at a certain phone number. We will accommodate your reasonable request.

3. Right of Access to Personal Health Information. You have the right to inspect and, upon written request, obtain a copy of your health information.

4. Right to Request Amendment. You have the right to request that we amend your health information. Your request must be made in writing and must state the reason(s) for the requested amendment. We may deny your request for amendment under certain circumstances. If we deny your request for amendment, we will give you a written denial notice, including the reasons for the denial. You have the right to submit a written statement disagreeing with the denial which will be included in your health record.

5. Right to an Accounting of Disclosures. You have the right to request an “accounting” of certain disclosures of your health information. You must submit your request in writing and you must state the time period for which you would like the accounting of disclosure. The accounting will include the disclosure date; the name of the person or entity that received the information and address, if known; a brief description of the information disclosed; and a brief statement of the purpose of the disclosure. The first accounting provided within a 12-month period will be free; for further requests, we may charge you our costs for completing the accounting.

6. Notification of Breaches of Your Health Information. You have the right to receive written notification of any “breach” of your unsecured protected health information, as that term is defined in 45 CFR §164.402.

E. Special Regulations Regarding Disclosure of Behavioral Health and HIV-Related Information

For disclosures concerning certain health information such as HIV-related information or records regarding behavioral health care that have been sent to us by another provider, special restrictions apply. Generally, we will disclose such information only with an Authorization, or as otherwise required by law.

F. For Information About This Notice or to Report A Concern Regarding Our Privacy Practices

1. If you believe that your privacy rights have been violated, you may file a complaint in writing with us or with the Office of Civil Rights in the U.S. Department of Health and Human Services at 200 Independence Avenue, S.W., Room 509 F, HHH Building, Washington D.C. 20201.

2. To file a complaint with us, you should contact:

Privacy Officer: Dr. Kathleen M. Berchelmann, M.D., My Catholic Doctor, P.L.L.C., 373 S. Willow St., Manchester, NH 03103, 314-888-5233

3. We will not retaliate against you in any way for filing a complaint against My Catholic Doctor.