Notice of Privacy Practices
Total Page:16
File Type:pdf, Size:1020Kb
Notice of Privacy Practices elliothospital.org Notice of Privacy Practices NOTICE OF PRIVACY PRACTICES THIS NOTICE OF PRIVACY PRACTICES (HEREINAFTER “NOTICE”) DESCRIBES HOW PROTECTED HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. Protected health information is information about you that we obtain to provide healthcare services to you and that can be used to identify you. It includes your name and contact information as well as information about your health, medical conditions, health insurance and medications. It may relate to your past, present or future medical conditions, healthcare services provided to you or payment for those services. The Health Insurance Portability and Accountability Act (HIPAA) requires healthcare organizations to protect the privacy of patient’s PHI and to provide you with this Notice to explain our legal duties and privacy practices regarding your PHI. HIPAA additionally allows healthcare organizations under common ownership or control to designate themselves as a single Affiliated Covered Entity for the purposes of complying with the HIPAA privacy and security rules. As such, it is important to notify you that Elliot Health System (EHS) and Southern New Hampshire Health System (SNHHS) are affiliated covered entities under a New Hampshire corporation called SolutionHealth. As such, an affiliated member may share PHI with Solution Health and its affiliated members for the treatment, payment and healthcare operations of the affiliated members and as permitted by HIPAA and this Notice. Elliot Health System 1 Who Will Follow This Notice. In addition to the above, this specific Notice will be followed by all healthcare professionals, employees, medical staff, students and volunteers of EHS.1 This Notice describes the ways in which we may use and disclose your protected health information. It also describes your rights and certain obligations that we have regarding the use and disclosure of your protected health information. We are required by law to: • Ensure that your protected health information is kept private; • Give you this Notice describing our legal duties and privacy practices with respect to your protected health information; • Follow the terms of the Notice that is currently in effect; and, • Notify you if your protected health information has been “breached,” which means that your protected health information had been used or disclosed in a way that is inconsistent with law and results in being compromised. 1Elliot Health System includes: Elliot Hospital, Visiting Nurse Association of Manchester and Southern New Hampshire; Elliot Medical Group (aka Elliot Physicians Network and Elliot Professional Services); and Elliot 1 Day Surgery and Endoscopy Center. 2 Notice of Privacy Practices How we may USE and DISCLOSE Protected Health Information about you. We are permitted to use and disclose protected health information about you in a variety of ways. For each category of uses or disclosures, we will explain what we mean and give some examples. Not every use or disclosure in a category will be listed. However, all of the ways we are permitted to use and disclose information will fall within one of these categories. For Treatment We may use your protected health information to provide you with medical treatment or services. We may disclose protected health information about you to doctors, nurses, technicians, medical students, or other hospital personnel who provide care or services to you. Different departments of the hospital also may share protected health information about you in order to coordinate the different services and treatments you need, such as prescriptions, laboratory work, and X-rays. We may also share your protected health information with your non- EHS health care providers, agencies or facilities for purposes of continuity of care, evaluation and treatment planning. We may also disclose protected health information about you to people who may be involved with your care, such as family members, friends, home health services, support agencies, clergy, or others who provide services that are necessary for your well-being. Dedicated substance use disorder programs and/or providers will not share information with other providers/entities or with friends/family without an authorization signed by you to release information. Elliot Health System 3 Electronic Exchange of Your Protected Health Information We may share your protected health information with other health care providers for treatment, payment and health care operations purposes, as permitted by law, through vendor(s) that allow other providers to have access to your electronic medical record through a secure connection or send information to other providers through a secure connection. For example, EHS is part of an Integrated Delivery Network (IDN) in New Hampshire and may share your protected health information with providers that have a treating provider relationship with you. Exchange of your health information can provide faster access, better coordination of care and assist providers to make more informed treatment decisions. Please contact the EHS Compliance & Privacy Department if you would like to opt out of sharing your information through these health information exchanges. For Payment We may use and disclose your protected health information so that the treatment and services you receive at EHS may be billed and payment may be collected from you, an insurance company, or a third party. We may tell your health plan about a treatment you are going to receive in order to obtain prior approval or to determine whether your plan will cover the treatment. We may also give information to someone who helps pay for your care. Dedicated substance use disorder programs and/or providers are required to obtain your consent before billing your health insurance for services provided. For Healthcare Operations We may use and disclose your protected health information for the operations of EHS. These uses and disclosures are necessary for general business activities, to enhance quality care and for medical staff activities. We may combine protected health information about many patients for purposes of making decisions about what services we provide, or whether certain new treatments are effective. We may also disclose information to doctors, nurses, medical students, and other EHS personnel for performance improvement, learning purposes, or we may share information with our security to maintain the safety of our facilities. 4 Notice of Privacy Practices Other Examples of Healthcare Operations Appointment Reminders We may use and disclose protected health information to contact you as a reminder that you have an appointment for treatment or medical care at the hospital or another entity covered by this Notice. Treatment Alternatives We may use and disclose protected health information to tell you about or recommend possible treatment options or health related benefits that may be of interest to you. Fundraising Activities We may use your demographic information to contact you in an effort to raise money for EHS or for the Mary and John Elliot Charitable Foundation. We would use only contact information, such as your name, address and phone number and the dates you received treatment or services at the Elliot. If you do not want us to contact you as part of its fundraising efforts, you may opt-out by sending a written notice to the Mary and John Elliot Charitable Foundation, 4 Elliot Way, Suite 301, Manchester, N.H. 03103-3599. Marketing We may contact you to provide information about treatment alternatives or other health-related benefits and services that may be of interest to you. We are required to obtain your authorization for other marketing activities or if we receive direct or indirect payment for your health information. We are prohibited from selling your health information without your specific, written authorization. Hospital Directory We may include certain limited information about you in the hospital directory while you are an inpatient at Elliot Hospital. This information may include your name, location in the hospital, your general condition (e.g., good, fair, etc.) and your religious affiliation. The directory information, except for your religious affiliation, may also be released to people who ask for you by name. Your name may be given to a member of the clergy, even if they do not ask for you by name. If you do not want to be listed in the hospital directory or have your name given to clergy, please contact your nurse. Elliot Health System 5 Research We may use and disclose your protected health information for research purposes under specific laws or when a special review board has reviewed and approved the research proposal and determined the privacy of your health information will be secure. In very limited circumstances, Federal law allows us to use your protected health information for research without your approval. Business Associate At times we have outside parties perform services for us. We require these parties, who are called business associates, to sign an agreement promising to take steps to keep your medical information private. As Required By Law We will disclose your protected health information when required to do so by Federal, state or local law. To Prevent a Serious Threat to Health or Safety We may use and disclose your protected health information when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person, or to prevent serious harm to property. Any disclosure, however, would be only to someone able to help prevent the threatened harm. Special Situations We may disclose protected health information about you to an entity assisting in a disaster relief effort so that your family can be notified about your condition, status and location. Organ and Tissue Donation If you are a potential organ donor, we may release protected health information to organ procurement organizations or eye or tissue banks, as necessary, to facilitate organ or tissue donation and transplantation.