NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.
We, at MedSavvy, know you value your privacy. That is why we are committed to the confidentiality and security of your personal information. We maintain physical, administrative and technical safeguards to protect against unauthorized access, use, or disclosure of your personal information, including information we share internally either orally, electronically, or in writing.
We collect personal information, such as your name, contact information, and health information, from you, your health care providers, and insurers that provide you coverage. We are required by law to maintain the privacy of this “protected health information” and to explain our legal duties and privacy practices. We are also required by law to notify affected individuals following a breach of unsecured protected health information. We provide the protections and apply the practices described in this notice to all protected health information that we maintain, including protected health information of former patients. We hope this notice will clarify our responsibilities to you and give you an understanding of your rights. We are required to abide by the notice that is currently in effect. This notice is in effect as of Feburary 7, 2017.
You may exercise the following rights by calling MedSavvy at the number below or writing our Privacy Official. See “Contacting us” at the end of this notice.
Inspection and copies
You have the right to request an inspection or copies of protected health information that we maintain about you in a “designated record set,” except psychotherapy notes and information that we compile in anticipation of, or for use in, a civil, criminal, or administrative proceeding. A “designated record set” is a group of records that we use to provide services to you, including your medical and billing records.
If you believe that protected health information we maintain about you in a designated record set is inaccurate or incomplete, you have the right to request an amendment to correct or complete the information. You must submit your request in writing and explain the reason for the amendment. If we agree to amend your information, we will make reasonable efforts to inform others, including people you identify, that the information has been amended and we will use our best efforts to include the amendment with any future disclosure. We may decline to amend information under certain circumstances. This is likely to occur if we did not create the original record. If we decline to amend the information, you have the right to submit a statement of disagreement. You should know that we are allowed to attach a rebuttal statement in response to your statement of disagreement.
You have the right to receive a paper copy of this notice upon request.
You have the right to request a list of certain disclosures of protected health information. The list will not include disclosures we make for your treatment or routine business activities. It also will not include disclosures made pursuant to an authorization, made more than six years before the date of the request, incidental disclosures, disclosures made for national security or intelligence, or disclosures made to a correctional facility. We will supply this list free of charge once a year at your request. If you request an accounting more than once in a 12-month period, we may charge a reasonable fee.
- You have the right to request that we communicate with you in confidence by using a different address or different means (i.e., e-mail or regular mail). We will make every effort to accommodate your request if it is reasonable and you provide an alternate means to communicate.
- You have the right to request restrictions on our use or disclosure of protected health information in addition to the restrictions imposed by law. Generally, we are not required to agree to your request and we may be unable to do so. If we do agree, we will comply with your request except in the case of emergency. We are, however, required to agree to your request to not disclose protected health information to your health plan concerning a health care item or service you obtain from us, if you pay (or a third party pays) for the item or service in full.
You have the right to submit a complaint if you believe we have violated your privacy rights. To submit a complaint, write to: MedSavvy, Privacy Office, P.O. Box 1071, Mailstop E12P, Portland, OR 97207 or call us at the phone number provided at the end of this notice. You also have the right to submit a complaint to the Secretary of the U.S. Department of Health & Human Services. Be assured that we will not retaliate against you for submitting a complaint.
Permitted uses and disclosures
To provide you with prescriptions and our health services, we use and disclose protected health information for a variety of purposes:
We may use and disclose protected health information to provide treatment to you. For example, we may use your protected health information to fill prescriptions for you and disclose your protected health information to your physician so s/he can better determine how to treat your health condition.
We may use or disclose protected health information for payment purposes. For example, we may use and disclose your protected health information to submit claims for payment of your prescriptions to your insurer or to collect out-of-pocket payments (such as deductibles, copayments, or coinsurance) from you.
Health care operations
We may use or disclose protected health information as necessary for pharmacy operations. For example, we may use or disclose your protected health information to improve the quality of care we provide, to respond to your customer service questions, or to respond to complaints.
Occasionally, we contract with business associates to perform functions on our behalf. We may disclose protected health information to these business associates in order to allow them to perform these functions. They also may collect, use or disclose protected health information on our behalf. We contractually obligate our business associates and they are required by law to provide the same privacy protections that we provide.
As permitted or required by law
We use or disclose protected health information as permitted or required by law. For example, some laws permit or require us to disclose protected health information for workers' compensation programs or to certain government agencies, such as the Food and Drug Administration.
Public health activities
We may disclose protected health information to: (a) public health agencies for the prevention and control of disease; (b) coroners or medical examiners as necessary for fulfillment of their duties; (c) agencies that engage in the procurement, banking, or transportation of organs or tissue to facilitate such donation and transplantation services; (d) researchers to conduct medical research or research intended to improve the health care system; and (e) third parties as necessary to avert a serious threat to the health or safety of a person.
We may disclose protected health information to health oversight agencies. These agencies are authorized by law to conduct audits; perform inspections and investigations; license health care providers, facilities, and insurers; to enforce regulatory requirements; and to investigate health care fraud. These agencies include: the State Board of Medicine, the U.S. Department of Health and Human Services, and the FBI.
We may disclose protected health information in the course of a judicial or administrative proceeding, and in response to a court order, subpoena, discovery request, or other lawful process.
We may disclose protected health information to law enforcement officials in response to an administrative subpoena, a warrant, or an administrative request intended to identify or locate a suspect, victim or witness. We also may disclose protected health information for the purpose of reporting a crime on our premises.
Military and national security
We may disclose protected health information to armed forces personnel for military activities and to authorized federal officials for national security and intelligence activities.
We may disclose an inmate’s protected health information to the correctional institution in which the inmate is incarcerated for treatment purposes or to ensure the safety of the inmate and others.
We may disclose your protected health information to you at your request, to inform you about the status of your claims, or for other purposes. For example, we may use protected health information to provide information about treatment alternatives or other health-related benefits or services that may be of interest to you.
Others involved in your health care
We may disclose protected health information to personal representatives such as appointed guardians, executors, conservators, and in many cases parents of minor children, as well as to attorneys in fact when a valid power of attorney exists. In addition, if you give us verbal permission or if your permission can be implied, we may disclose protected health information to family members or others on your behalf.
Except as otherwise provided in this notice, we may not use or disclose your protected health information without your written authorization. You may give us written authorization to use protected health information or disclose protected health information about yourself to anyone for any purpose. An authorization remains valid for two years unless the authorization states otherwise or you revoke it. You may revoke an authorization at any time by submitting a written revocation (see “Contacting us,” below), but a revocation will not affect any use or disclosure permitted by the authorization before the revocation. In particular, we need your written authorization (i) for most uses and disclosures of psychotherapy notes; (ii) to sell information about you to a third party; and (iii) for “marketing” purposes. (“Marketing” does not include—and your authorization is not necessary for us to send you— communications about treatment alternatives and our own health-related products and services as well as certain health-related products and services of third parties, provided that we do not receive payment for sending the communications.)
We reserve the right to change our privacy practices and this notice at any time without advance notice. Before we make any material change in our privacy practices, we will change this notice and post the new notice on our website. We will provide a copy of the new notice upon request. The new notice will apply to all protected health information in our possession, including any information created or received before the revised notice became effective.
You may reach us at any time by emailing our Privacy Official at Privacy@medsavvy.com, or during regular business hours by calling us at a number below:
For more information about this notice, to exercise any of the privacy rights described above, or to file a written privacy-related complaint, you may write to: Privacy Official, P.O. Box 1071, MS E12P, Portland, OR 97207-1071 E-mail: firstname.lastname@example.org