Mountain Peak Recovery
HIPAA Privacy Regulations
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND
DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.
Notice of privacy practices pursuant to 45 C.F.R. § 164.520 and Utah S.B. 20
We are required by law to maintain the privacy of your Protected Health Information (PHI). PHI consists of individually identifiable health information which may include demographic information we collect from you or create or receive by another health care provider, a health plan, your employer, or a health care clearinghouse, and that relates to (1) your past, present or future physical or mental health or condition, (2) the provision of health care to you, or (3) the past, present or future payment of the provision of health care to you.
We are required to provide you with notice of our legal duties and privacy practices with respect to PHI. We are required to abide by the terms of our Notice of Privacy Practices currently in effect. However, we reserve the right to change our privacy practices in regard to PHI and make new privacy policies effective for all PHI that we maintain. We will post a copy of our current Notice of Privacy Practices in the staff office and keep a copy of the revised notice with check-in personnel, provide you with a copy upon request, and if we maintain a website, will post our Notice of Privacy Practices on the website.
Examples of Uses and Disclosures of Your PHI related to Treatment, Payment & Operations
HIPAA privacy regulations give us the right to use and disclose your PHI without your consent to carry out treatment, payment, and health care operations. Below are some examples of how we intend to use your PHI in regard to treatment, payment, and health care operations.
In connection with treatment, for example, we will use and disclose your PHI to provide, coordinate, or manage your health care and related services. We will disclose your PHI to other providers who may be involved in your care.
We will use your PHI to obtain payment for our services, including sending claims to your insurer or to a federal program such as Medicare that pays for your treatment and sends you a bill for any amounts due that your insurer does not pay. We may also employ business associates, such as a billing company or collection agency to help us bill and collect. The PHI will include items such as a description of your condition(s), treatment, diagnosis, supplies and drugs used, etc.
Health Care Operations
We will use your PHI to support our business activities, such as allowing our auditors, consultants, or attorneys access to your PHI to audit our claims to determine if we billed accurately for the services we provided to you, to evaluate our staff to see if they properly cared for you, or to send information about you to third party business associates so they may perform some of our business operations.
Description of Other Required or Permitted Uses and Disclosures of Your PHI
We may contact you to remind you of an appointment. We may call your residence, office, or any other number we have on file. We may leave a message if you are not available and may state the name of our clinic, the date and time of the appointment, and the address at which the appointment is to be kept. We may also mail you a notice of your appointment to the address we have on file.
As Required by Law
We will disclose your PHI when required by federal, state, or local law. For example, we may receive a subpoena for which we are required by law to provide copies of your treatment file.
To Avert a Serious Threat to Public Health or Safety
We will use and disclose your PHI to public health authorities permitted to collect or receive the information for the purpose of controlling disease, injury, or disability. If directed by that health authority, we will also disclose your health information to a foreign government agency that is collaborating with the public health authority.
We will disclose your PHI for workers compensation or similar programs that provide benefits for work-related injuries or illness.
If you are in inmate, we will disclose your PHI to a correctional institution or law enforcement official only if you are an inmate of that correctional institution or under the custody of the law enforcement official. This information would be necessary for the institution to provide you with health care, to protect the health and safety of others, or for the safety and security of the correctional institution.
Other Services and/or Fundraising
We may use your PHI to contact you with information about treatment alternatives or other health-related benefits and services that may be of interest to you. We may use your PHI to contact you in an effort to raise funds for our operations; however, you have the right to opt out of receiving any fundraising communications by sending a letter to our privacy officer in writing to the address at which you are treated.
Medicaid and CHIP Eligibility Database
We may submit or already have submitted personally identifiable information about you to the eligibility databases of Medicaid and the Children’s Health Insurance Program (CHIP).
Uses and Disclosures to which You have an Opportunity to Object
Others involved in Your Care
We may provide relevant portions of your PHI to a family member, a relative, a close friend, or any other person you identify as being involved in your medical care or payment for care. If you bring someone with you into a treatment room, you are hereby notified that you will have identified that person to us as being involved in your care or payment for your care. If you do not object to us discussing your PHI in front of them, we may discuss your PHI in their presence. In an emergency, or when you are not capable of agreeing or objecting to these disclosures, we will disclose PHI, as we determine, is in your best interest but will tell you about it after the emergency and give you the opportunity to object to future disclosures to family and friends.
Uses and Disclosures that Require your Signed Authorization
There are certain uses and disclosures of your PHI that require your written authorization. For example, most uses and disclosures of psychotherapy notes (where appropriate), disclosures of PHI for marketing purposes, and disclosures that constitute a sale of PHI require your signed authorization. Also, any use or disclosure of your PHI not described in this notice requires your signed authorization.
Your Right to Revoke Your Authorization
If you sign an authorization allowing us to use or disclose your PHI outside of the uses and disclosures made in this notice, you may revoke that authorization by advising us in writing with a letter addressed to the Privacy Officer at Mountain Peak Recovery PO Box 361, Spanish Fork, UT 84660. Your revocation will become effective as soon as we are reasonably able to enter it into our records, which is typically within 5 business days after we receive the letter. Your revocation will not affect our reliance on your authorization prior to the effective date.
Your Right to Restrict Certain PHI to a Health Plan
You have the right to require us to restrict any disclosure of your PHI to a health plan regarding an item or service for which you (or someone on your behalf-other than a health plan) paid out-of-pocket the entire amount due for the item or service which we provided and billed to you. You must make such a request in writing to us with a letter addressed to the Privacy Officer at Mountain Peak Recovery, PO Box 361, Spanish Fork, UT 84660. If you make such a request, we are required to honor it.
Notification in Case of Breach of Unsecured PHI
In the event of an unauthorized or improper use of disclosure of your PHI (ie., a “breach”), you have a right to receive notification from us of the circumstances surrounding the breach, what we have done to investigate and mitigate it, and how to protect yourself, in our opinion.
Patient Rights Related to PHI
In addition to your other rights provided herein, you have the right to:
Request an Amendment
You have the right to request that we amend your medical information if you feel that it is incomplete or inaccurate. You may request amendments to your demographic and billing information be communicating with a staff member. You may also request amendments to other medical information. If such a request is submitted to our Privacy Officer, it must be in writing stating what information is incomplete or inaccurate and the reasoning that supports your request. We are permitted to deny your request if it is not in writing or does not include a reason that we believe supports the request. We may also deny your request if the information was not created by us, or it the person who created it is no longer available to make the amendment.
You have the right to request a restriction of how we use of disclose your medical information for treatment, payment, or health care operations. For example, you could request that we not disclose information about a prior treatment to a family member or friend who may be involved in your care or payment for care. Your request must be made in writing to the Privacy Officer at Mountain Peak Recovery, PO Box 361, Spanish Fork, UT 84660. We are not required to grant your request. If we do agree, we will comply with your request except for emergency treatment.
Inspect and Copy
You have the right to inspect and copy the PHI we maintain about you in our designated record set for as long as we maintain that information. This designated record set includes your medical and billing records, as well as any other records we use for making decisions about your care. Amy psychotherapy notes that may have been included in records we received are not available for your inspection or copying by law. We may charge you a fee for the costs of copying, mailing, or other supplies used in fulfilling your request. If you wish to inspect or copy your medical information, you must submit your request in writing to our Privacy Officer at Mountain Peak Recovery, PO Box 361, Spanish Fork, UT 84660. We have 30 days to respond to your request for information we maintain at our facility. If the information is stored off-site, we are allowed up to 60 days to respond, but must inform you of this delay. HITECH expands this right, giving individuals the right to access their own e-health record in an electronic format if we maintain your records in an electronic format, and to direct us to send the e-health records directly to a third party. We may only charge for the labor costs under electronic transfers of e-health records.
An Accounting of Disclosures
You have the right to request a list of the disclosures of your health information we have made that were for treatment, payment, or health care operations. Your request must be in writing and must state the time period for the requested information. You may not request information for any dates prior to April 14, 2003, not for a period of time greater than six years (our legal obligation to retain information). Your first request for a list of disclosures within a 12-month period will be free. If you request an additional list within 12-months of the first request, we may charge you a fee for the costs of providing the subsequent list. We will notify you of such costs and afford you the opportunity to withdraw your request before any costs are incurred.
Request Confidential Communications
You have the right to request how we communicate with you to preserve your privacy. For example, you may request that we call you only at your work number, or by mail at a special address or postal box. Your request must be made in writing and must specify how or where we are to contact you. We will accommodate all reasonable requests; however, we will not accommodate a request that we perceive is an attempt to avoid receiving notice of a bill for the payment of our services.
File a Complaint
If you believe we have violated your medical information privacy rights, you have the right to file a complaint with us directly, or to the Secretary of the United States Department of Health and Human Services: U.S. Department of Health and Human Services, 200 Independence Avenue, S. W. Washington, D.C. 20201, Phone: (202) 619-0257, Toll Free: (877) 696-6775. To file a complaint with us, you must make it in writing within 180 days of the suspected violation. Provide as much detail as you can about the suspected violation and send it to our Privacy Officer at Mountain Peak Recovery PO Box 361, Spanish Fork, UT 84660. No patient will be retaliated against for making a complaint.
A Paper Copy of This Notice
You have the right to receive a paper copy of this notice upon request.
You may contact our Privacy Officer at the following phone number for any questions: (801) 824-8829.