Harpeth Pediatrics
Six Rights HIPAA Guarantees Patients 1. You have the right to inspect and get a copy of your medical records.
We will always respond to your requests for medical records as quickly as possible. A handling fee is sometimes charged for making copies of shots records if you've requested them more than once. 2. You have the right to request correction of inaccurate health information.
We encourage patients first to go back to their physician or other provider if they discover there is a mistake in the medical record. If the physician or other provider will not change the medical record—regardless of the reason—the patient can file an addendum to the record. 3. You have the right to find out where your health information has been shared for purposes other than care, payment, or health care operations.
In the past, health care providers sometimes shared patients' health information with other institutions for research or other purposes. Under HIPAA, each institution must keep track of where your health information has been shared. You can request an accounting of this information for up to six years, beginning with information collected after April 14, 2003, the date when healthcare organizations are required to implement HIPAA. 4. You have the right to request special restrictions on the use or disclosure of your health information.
Harpeth will continue to follow its policies of not releasing a patient’s name or protected health information to the media or to anyone other than next of kin unless the patient (or guardian) has given permission. However, to ensure compliance with HIPAA regulations, that permission has to be written. Even after you have given permission for your information to be shared, you have the right to revoke that decision.
5. You have the right to request that your protected health information be shared with you in a particular way.
If you prefer your health care provider to send your information to a certain address, or call you at a certain phone number, you have the right to request this, and the health care provider must comply with every reasonable request. 6. You have the right to see a provider's policy on confidentiality.
All patients of Harpeth Pediatrics will be provided with a Notice of Privacy Practices. This informational handout will be given to patients when they are first seen. It will also be posted on the walls of our clinic and posted on our website: www.harpethpediatrics.com. The Notice of Privacy Practices describes how Harpeth Pediatrics will handle protected health information, and provides information on who to contact if you believe your privacy rights are not being honored. Notice of Privacy Practices
Harpeth Pediatrics
This notice describes how your medical information may be used and disclosed and how you can get access to this information. Please review it carefully. It explains how the physicians and staff of Harpeth Pediatrics may use and disclose your protected health information (PHI) for purposes of treatment, payment, and health care operations, and for other purposes that are permitted or required by law.
I. Our Responsibilities:
Harpeth Pediatrics takes the privacy of your/your child's health information seriously. We are required by law to maintain the privacy of your health information and provide you with this Notice of Privacy Practices. We will abide by terms of this Notice of Privacy Practices. We reserve the right to change this Notice of Privacy Practices and to make any new Notice of Privacy Practices effective for all protected health information that we maintain. Any new Notice of Privacy Practices adopted will be posted in our lobby and on our website (www.harpethpediatrics.com) and made available at your next appointment.
II. What is Protected Health Information (PHI)?
Protected health information (PHI) is demographic and individually identifiable health information that will or may identify the patient and relates to the patient's past, present or future physical or mental health or condition and related health care services.
III. What Does "Health Care Operations" Include?
Health care operations include activities such as communications among health care providers; conducting quality assessment and improvement activities; evaluating the qualifications, competence, and performance of health care professionals; training future health care professionals; contracting with insurance companies: conducting medical review and auditing services; compiling and analyzing information in anticipation of or for use in legal proceedings; and general administrative and business functions.
IV. How is Medical Information Used?
Harpeth Pediatrics uses medical records as a way of recording health information, planning care and treatment, and as a tool for routine health care operations. Your insurance company may request information such as procedure and diagnosis information that we are required to submit in order to bill for treatment we provide to the patient. Other health care providers or health plans reviewing your records must follow the same confidentiality laws and rules required of Harpeth Pediatrics.
V. Examples of How Medical Information May be Used for Treatment, Payment or Health Care Operations:
Medical information may be used to justify needed patient care services (i.e., lab tests, prescriptions, treatment protocols). We will use medical information to establish a treatment plan. We may disclose protected health information to another provider for treatment (i.e., referring physicians, specialists, and area hospitals). We may submit claims to your insurance company containing medical information. We may use the emergency contact information you provided to contact you if the address on record is no longer accurate. We may contact you to remind you of the patient's appointment by calling you. We may contact you to discuss treatment alternatives or other health related benefits that may be of interest. VI. Why Do I Have to Sign a Consent Form?
When you, as the patient or the parent or guardian of a patient, sign a consent form, you are giving Harpeth Pediatrics permission to use and disclose protected health information for the purposes of treatment, payment and health care operations. You will need to sign a separate authorization to have protected health information released for any reason other than treatment, payment or health care operations.
VII. Can I Change My Mind and Revoke an Authorization?
You may change your mind and revoke an authorization, except (1) to the extent that we have relied on the authorization up to that point, (2) if the authorization was obtained as a condition of obtaining insurance coverage. All requests to revoke an authorization should be in writing.
VIII. When is my Authorization/Consent Not Required?
The law requires that some information may be disclosed without your authorization in the following circumstances:
In case of an emergency When there are communication or language barriers When required by law When there are risks to public health To conduct health oversight activities To report suspected child abuse or neglect To specified government regulatory agencies In connection with judicial or administrative proceedings For law enforcement purposes To coroners, funeral directors, and for organ donation In the event of a serious threat to health or safety IX. What if I Have a Question/Complaint?
If you have questions regarding your privacy rights, or if you believe your privacy rights have been violated, please contact the Privacy Officer at Harpeth Pediatrics at 615-771-2656, ext.101 or via email at harpethpedhr@comcast.net. If you file a complaint, you will not be penalized for doing so. The address for the Secretary of the Department of Health and Human Services is: Office of Civil Rights, U.S. Department of Health and Human Services, Atlanta Federal Center, Suite 3B70, 61 Forsyth St., S.W., Atlanta, GA, 30303-8909, phone: 404-562-7886, fax: 404-562-7881, TDD: 404-331-2867, or www.hhs.gov/ocr/hipaa.
