Notice of Privacy Practices
This Notice of Privacy Practices describes how Clarion Medical and its affiliates (“Clarion Medical”) may use and disclose your confidential health information, known as Protected Health Information (“PHI”), in the course of treatment, payment, or other health care operations and for other purposes authorized or required by law. The Notice also describes your rights with respect to your PHI and explains how you may exercise those rights.
Clarion Medical is required by law to maintain the privacy of PHI and to provide you with notice of its legal duties and privacy practices with respect to PHI. We are required to abide by the terms of the Notice of Privacy Practices currently in effect. We reserve the right to change the terms of this Notice at any time and to make new notice provisions effective immediately for all PHI that we maintain. Any changes to the Notice will be posted immediately in our offices and posted to our web site if we maintain one at the time of the change. You also may request a copy of the new Notice the next time that you visit one of our offices, or we will give you a copy of the new Notice the next time we provide health care services to you. You also may contact our Privacy Officer identified below for the latest version of the Notice.
How We Use And Disclose Your Protected Health Information
Uses and Disclosures of Protected Health Information for Treatment, Payment, and Health Care Operations
Clarion Medical may use and disclose your PHI for the purposes of treatment, payment for our services, and health care operations (“TPO”), as described below. For those times when we are required by state or federal laws to ask your permission, you will be asked to sign a consent to permit us to disclose your PHI for TPO. We will ask you to sign the consent at the beginning of your care so as to avoid delaying the delivery of health care services to you.
Examples of our uses and disclosures of your PHI for TPO include:
Treatment: We may use and disclose your PHI, in writing, electronic form and verbally, to provide and coordinate the delivery of emergency health care and other transportation services for you. We may communicate with your doctor, the doctors and staff of the hospitals and other facilities to or from which you are transported, dispatch centers, and other emergency service providers. We may transmit or receive your PHI via radio, telephone, or computer. We may give the hospital or other facility to which you are transported a copy of the written record (run sheet) we create when we treat and transport you.
Payment: We may use and disclose your PHI, as necessary, to obtain payment for the health care services that we provide to you. This includes preparing and submitting bills to insurers, health plans, and other payers, either directly or through a third party billing company. We also may use and disclose your PHI for eligibility or coverage determinations, medical necessity determinations and reviews, pre-authorizations of services and other utilization review activities, management of claims, and collection of outstanding accounts.
Health Care Operations: We may use and disclose your PHI, as necessary, to perform the business operations of our company. This includes such activities as quality management, performance reviews, licensing, accreditation, training programs, and business management and administration. We also may use and disclose your PHI for such purposes as obtaining legal and financial services, business planning, processing complaints, data collection, fundraising, research, and certain marketing activities for our company.
NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW CONFIDENTIAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Business Associates: We may share your PHI with “business associates” that perform certain TPO activities on our behalf such as billing, dispatch, utilization review or quality management services. We will have a written agreement with our business associates that requires them to protect the privacy of your PHI.
Uses and Disclosures of PHI After You Have an Opportunity to Agree or Object
We may disclose to a member of your family, a relative, a close friend or any other person that you identify your PHI that is directly relevant to that person’s involvement in your health care. We may use or disclose your PHI for notifying your family member, personal representative, or any other person that is responsible for your care of your location, general condition, or death. We also may use or disclose your PHI to an authorized public or private entity to assist in disaster relief efforts.
You will be given an opportunity to agree or object before the company uses or discloses your PHI for these purposes. If you object to the disclosure, we will not disclose the PHI to the person. However, in emergency circumstances or if you are incapacitated, our staff, in their professional judgment, will determine whether the use or disclosure is in your best interest. Our staff will then release only PHI directly relevant to that person’s involvement in your health care.
Uses and Disclosures of PHI Without Your Authorization or Opportunity to Object
Clarion Medical is permitted or required to use and disclose your PHI without your written authorization, or an opportunity to object, in certain circumstances, including:
Required by Law: We may use and disclose your PHI to the extent that disclosure is required or authorized by federal or state laws.
Public Health Activities: We may use and disclose your PHI for public health activities authorized by law. For example, for activities related to the reporting and tracking of communicable diseases.
Abuse, Neglect, or Domestic Violence: We may use and disclose your PHI to a governmental entity or agency authorized to receive reports of child abuse or neglect, or reports of adult abuse, neglect, or domestic violence.
Health Oversight Activities: We may use and disclose your PHI for audits or government investigations, inspections, disciplinary proceedings, and other administrative or judicial actions undertaken by the government (or their agents) by law to oversee the health care system.
Judicial and Administrative Proceedings: We may use and disclose your PHI as required by a court or administrative order, or in certain circumstances, in response to a subpoena or other legal process.
Law Enforcement: We may use and disclose your PHI for law enforcement activities in certain limited circumstances, such as where there is a warrant.
Coroners, Medical Examiners, and Funeral Directors: We may use and disclose your PHI for identifying a deceased person, determining cause of death, or carrying out funeral director duties.
Organ Donation: If you are an organ donor, we may use and disclose your PHI to organizations that handle organ procurement or organ, eye, or tissue transplantation or to an organ donation bank, as necessary to facilitate organ donation and transplantation.
Research: We may use and disclose your PHI in limited circumstances to researchers when an institutional review board has reviewed the research proposal and protocols to ensure the privacy of your PHI and has approved the research.
Workers Compensation: We may use and disclose your PHI to comply with workers’ compensation laws and other similar legally established programs.
De-Identified Information: We may use and disclose your PHI if it does not personally identify you or reveal who you are.
Personal Representative: We may use and disclose your PHI to your personal representative, such as a legal guardian, as if that person is you with respect to disclosures of your health information. If you become deceased, we may disclose health information to an executor or administrator of your estate to the extent that person is acting as your personal representative.
Limited Data Set: We may use and disclose a limited data set that does not contain specific readily identifiable information about you for research, public health, and health care operations. We may not disseminate the limited data set unless we enter into a data use agreement with the recipient in which the recipient agrees to limit the use of that data set to the purposes for which it was provided, ensure the security of the data, and not identify the information or use it to contact any individual.
Uses and Disclosure of PHI Based Upon Your Written Authorization
Except in the circumstances described above, we will use and disclose your PHI only with your written authorization. For example, we will not use or disclose your PHI for certain fundraising, research and marketing activities without your prior written authorization. The written authorization must identify the individual or entity to whom we may disclose your PHI and specifically describe the PHI to be disclosed. You may revoke the authorization at any time, in writing, except to the extent that we have already used or disclosed PHI in reliance on your authorization.
Future Contacts with You
We may contact you to remind you of a scheduled transport, or to inform you of other services we provide or other health-related benefits and services that may be of interest to you.
Your Rights With Respect To Your Protected Health Information
The following describes your rights with respect to your PHI and how you may exercise your rights.
The Right to Inspect and Copy Your PHI
You have the right to inspect and copy your PHI that is contained in a designated record set of medical and billing records for as long as we maintain the PHI. In certain circumstances, we may deny your access to PHI, and you may appeal certain types of denials. You will need to complete a form to request access to or copying of PHI. Normally, you will be provided access to your PHI within 30 days. We have the right to charge a reasonable fee for copying any PHI for you. If you wish to inspect and/or copy your PHI, contact the Privacy Officer designated at the end of this Notice. You also have the right to request that an electronic copy of your records be sent to you or another individual or entity if your PHI is maintained in an electronic health record.
The Right to Amend Your PHI
You have the right to ask us to amend your PHI. We have the right to deny your request in certain circumstances. For example, we will deny the request if we believe the PHI is correct. If we deny the request for amendment, you have the right to file a statement of disagreement with us and we may prepare a rebuttal statement. You will need to complete a request form to amend your PHI. Normally, we will respond to your request to amend within 60 days. If you wish to amend your PHI, contact the Privacy Officer designated at the end of this Notice.
The Right to Request a Restriction of the Use or Disclosure of Your PHI
You have the right to request a restriction of the use and disclosure of your PHI for the purpose of treatment, payment, and health care operations. You may also request that your PHI not be disclosed to family members or friends who may be involved in your care. We have the right to deny your request for a restriction, unless your request to restrict the release of your PHI to a health plan for purposes of payment if you have paid out-of-pocket for the service. If we do agree to a restriction, we will not disclose your PHI in violation of the restriction except in emergency circumstances. You will need to complete a form to request a restriction of the use and disclosure of PHI. If you wish to request a restriction of the use and disclosure of PHI, contact the Privacy Officer designated at the end of this Notice.
The Right to Request to Confidential Communications
You have the right to request that we send confidential communications to you by an alternative means or at an alternative location without giving us an explanation as to why you are making the request. For example, you may ask that all correspondence be sent to a work address rather than a home address. We will accommodate reasonable requests. If you wish to request to receive confidential communications from us by alternative means or at an alternative location, contact the Privacy Officer designated at the end of this Notice to receive the necessary form for your request.
The Right to Receive an Accounting of Disclosures
You may ask for an accounting from us of certain disclosures of your PHI that we have made in the last six years prior to your request. We are not required by law to account for certain disclosures. For example, we are not required to account for disclosures for treatment, payment or operations (unless the disclosures were made through an electronic health record), disclosures to you or disclosures pursuant to your written authorization. If you wish to request an accounting of the disclosures that are not exempted from the accounting requirement, contact the Privacy Officer designated at the end of this Notice.
The Right to Obtain Paper Copy of Notice of Privacy Practices
You have the right to obtain this paper copy of the Notice of Privacy Practices, even if you agree to accept the Notice electronically.
Right to Receive Notice of a Breach
You have the right to receive a notice of any breaches of Unsecured PHI as soon as possible or no later than 60 days following the discovery of a breach by first class mail or by e-mail. The notice will include all elements required by law. Based on the number of patients affected, we may be required to send notice to media outlets or the Secretary of Health and Human Services. We are required to maintain a written log of breaches and submit an annual report to the Secretary.
How To Make A Complaint
You have the right to complain to us, or to the Secretary of the U.S. Department of Health and Human Services if you believe your privacy rights have been violated. We will not retaliate against you in any way for filing a complaint with the government or us. You may file a complaint by notifying our Privacy Officer who will give you further information about the Complaint Process.
If you have any questions about this Notice, your rights with respect to PHI, or wish to file a complaint, please contact:
154 Hansen Access Rd
King of Prussia, PA 19406
This Notice of Privacy Practices first became effective on January 1, 2006.