Notice of Privacy Practices for Protected Health Information (PHI): This Notice describes how [Company Name — TBD] (“we”, “us”, or “our”) may use and disclose your Protected Health Information (PHI) to carry out treatment, payment, or healthcare operations and for other purposes permitted or required by law. We are required by law to maintain the privacy of your PHI and to abide by the terms of this Notice.
Uses and Disclosures of PHI
We may use and disclose your PHI for the following purposes:
1. Treatment: To provide, coordinate, or manage your healthcare and related services, including communication with other healthcare providers about your treatment.
2. Payment: To obtain payment for healthcare services provided to you, including billing and collection activities.
3. Healthcare Operations: For quality assessment, improvement activities, case management, accreditation, licensing, credentialing, and conducting or arranging for medical reviews, audits, or legal services.
4. As Required by Law: When required to do so by federal, state, or local law.
5. Public Health and Safety: To prevent or control disease, injury, or disability, or to notify persons who may have been exposed to a communicable disease.
6. Health Oversight Activities: To health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensure.
7. Judicial and Administrative Proceedings: In response to a court or administrative order, subpoena, discovery request, or other lawful process.
8. Law Enforcement: For law enforcement purposes, such as to comply with a court order, warrant, or other legal process.
9. Research: For research purposes when the research has been approved by an institutional review board and privacy protections are in place.
10. Organ and Tissue Donation: To organizations that handle organ procurement, transplantation, or donation, if you are an organ donor.
11. Workers’ Compensation: For workers’ compensation or similar programs that provide benefits for work-related injuries or illnesses.
12. Military and Veterans: As required by military authorities, if you are a member of the armed forces.
13. Inmates: To the correctional institution or law enforcement official having custody of you, if you are an inmate.
Your Rights Regarding PHI
1. Right to Inspect and Copy: You have the right to inspect and copy your PHI that we maintain, with certain exceptions. Submit a written request to our Privacy Officer. We may charge a reasonable fee for copying costs.
2. Right to Amend: You have the right to request an amendment to your PHI if you believe it is incorrect or incomplete.
3. Right to an Accounting of Disclosures: You have the right to request an accounting of disclosures of your PHI made by us in the past six years, except for disclosures made for treatment, payment, or healthcare operations.
4. Right to Request Restrictions: You have the right to request a restriction on our use or disclosure of your PHI. We are not required to agree to your request but will consider it.
5. Right to Request Confidential Communications: You have the right to request that we communicate with you about your PHI in a certain way or at a certain location.
6. Right to a Paper Copy of This Notice: You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically.
7. Right to be Notified of a Breach: You have the right to be notified in the event that we discover a breach of your PHI.
Transmission of PHI
We are committed to protecting the privacy of your PHI and will ensure that any electronic transmission of PHI complies with the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule (45 CFR 164). This includes the use of Secure-Socket Layer (SSL) or equivalent technology for the transmission of PHI.
Changes to This Notice
We reserve the right to change this Notice and the revised Notice will be effective for PHI we already have about you, as well as any information we receive in the future. We will post a copy of the current Notice on our website. The Notice will contain the effective date on the first page.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the Secretary of the Department of Health and Human Services. You will not be retaliated against for filing a complaint.
State-Specific Privacy Provisions
In addition to the privacy practices described above, we comply with applicable state-specific privacy laws.
California
We comply with the Confidentiality of Medical Information Act (CMIA). California residents have the right to request access to PHI in a readily usable electronic format, restrict certain disclosures to health plans, and request that PHI not be used for marketing or sold to third parties.
New York
We comply with the New York State Confidentiality of Information Law, which provides additional privacy protections for HIV-related information, mental health records, and genetic testing results. We will obtain written consent before disclosing such information.
Texas
We comply with the Texas Medical Privacy Act, which offers privacy protections beyond HIPAA, including requiring consent for certain disclosures of PHI and specific requirements for the destruction of PHI.
Florida
We comply with Florida’s privacy laws, which offer additional protections for mental health records, HIV/AIDS-related information, and substance abuse treatment records. We will obtain written consent before disclosing such information.
Illinois
We comply with Illinois’s specific privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results. We will obtain written consent before disclosing such information.
Massachusetts
We comply with Massachusetts’s specific privacy laws related to mental health records, HIV/AIDS-related information, and genetic testing results. We will obtain written consent before disclosing such information.
If you reside in a state other than those listed above, please consult your state’s specific privacy laws for information about any additional rights you may have regarding your PHI.
Contact Us
[Company Name — TBD] Email: hello@everhumanlabs.com Website: everhumanlabs.com