NOTICE OF PRIVACY PRACTICES

Effective Date September 23, 2013 (Revision December 27, 2013)

THIS NOTICE DESCRIBES HOW MEDICAL/HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

We are required by law to maintain the privacy of your health information; to provide you this detailed Notice of our legal duties and privacy practices relating to your health information; to notify you following a breach of unsecured health information; and to abide by the terms of the Notice that are currently in effect. This Notice applies to our use and disclosure of your health information for purposes of enrollment, eligibility and payment under the PACE program as well as our use and disclosure of your health information for purposes of providing you with treatment under the PACE program.

I. USES AND DISCLOSURES FOR TREATMENT, PAYMENT AND HEALTH CARE OPERATIONS

The following lists various ways in which we may use or disclose your protected health information (“PHI”) for purposes of treatment, payment and health care operations.

For Treatment. We will use and disclose your PHI in providing you with treatment and services and coordinating your care and may disclose your PHI to other providers involved in your care. Your PHI may be used by doctors involved in your care and by nurses and home health aides as well as by physical therapists, social workers, personal care attendants or other persons involved in your care. For example, members of the multidisciplinary team (which includes your primary care physician, a registered nurse, a social worker, physical and occupational therapists, and other care givers) will discuss your plan of care and contact any specialists regarding care provided to you.

For Payment. We may use and disclose your PHI for billing and payment purposes. We may disclose your PHI to your personal representative, or to insurance or managed care company, Medicare, Medicaid or the state agency charged with administering PACE programs. For example, we may disclose PHI to Medicare or the state administering agency in order to determine your continued eligibility for PACE program services. We will also require you to sign a release permitting the disclosure of personal information to Medicare, Medicaid, and the state administering agency for these purposes as a condition of your enrollment agreement.

For Health Care Operations. We may use and disclose your PHI as necessary for health care operations, such as management, personnel evaluation, education and training and to monitor quality of care. For example, we will use data about your treatment in order to conduct quality assessment activities. We may disclose your PHI to another entity with which you have or had a relationship if that entity requests your PHI for certain of its health care operations or health care fraud and abuse detection or compliance activities.

II. SPECIFIC USES AND DISCLOSURES OF YOUR HEALTH INFORMATION

The following lists various ways in which we may use or disclose your PHI.

Individuals Involved in Your Care or Payment for Your Care. Unless you object, we may disclose PHI about you to a family member, close personal friend or other person you identify, including clergy, who is involved in your care.

Emergencies. We may use and disclose your PHI as necessary in emergency treatment situations.

As Required By Law. We may use and disclose your PHI when required by law to do so.

Business Associates. Our business associates are individuals and organizations that carry out functions or activities on our behalf that involve protected health information. We may disclose your PHI to a business associate who needs the information to perform services for the PACE program. Our business associates are committed to preserving the confidentiality of this information.

Public Health Activities. We may disclose your PHI for public health activities. These activities may include, for example, reporting to a public health authority for preventing or controlling disease, injury or disability; reporting elderly abuse or neglect; or reporting deaths.

Reporting Victims of Abuse, Neglect or Domestic Violence. If we believe that you have been a victim of abuse, neglect or domestic violence, we may use and disclose your PHI to notify a government authority, if authorized by law or if you agree to the report.

Health Oversight Activities. We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections and licensure actions or for activities involving government oversight of the health care system. As a condition of enrollment, we will require you to sign a release permitting the disclosure of personal information to Medicare, Medicaid, and the state administering agency for these purposes.

To Avert a Serious Threat to Health or Safety. When necessary to prevent a serious threat to your health or safety or the health or safety of the public or another person, we may use and disclose your PHI, limiting disclosures to someone able to help lessen or prevent the threatened harm.

Judicial and Administrative Proceedings. We may disclose your PHI in response to a court or administrative order. We also may disclose your PHI in response to a subpoena, discovery request, or other lawful process, provided certain conditions are met. These conditions include making efforts to contact you about the request or obtaining an order or agreement protecting the PHI.

Law Enforcement. We may disclose your PHI for certain law enforcement purposes, including, for example, to comply with reporting requirements; to comply with a court order, warrant, or similar legal process; or to respond to certain requests for information concerning crimes.

Research. We may use and disclose your PHI for research purposes if the privacy aspects of the research have been reviewed and approved, if the researcher is collecting information in preparing a research proposal, if the research occurs after your death, or if you authorize the use or disclosure.

Coroners, Medical Examiners, Funeral Directors, Organ Procurement Organizations. We may release your PHI to a coroner, medical examiner, funeral director or, if you are an organ donor, to an organization involved in the donation of organs and tissue.

Disaster Relief. We may disclose your PHI to a disaster relief organization.

Military, Veterans and other Specific Government Functions. If you are a member of the armed forces, we may use and disclose your PHI as required by military command authorities. We may disclose your PHI for national security purposes or as needed to protect the President of the United States or certain other officials or to conduct certain special investigations.

Workers’ Compensation. We may use and disclose your PHI to comply with laws relating to workers’ compensation or similar programs.

Inmates/Law Enforcement Custody. If you are under the custody of a law enforcement official or a correctional institution, we may disclose your PHI to the institution or official for certain purposes including the health and safety of you and others.

Fundraising Activities. [Include only if applicable.] We may use and disclose certain limited contact information for fundraising purposes and may provide contact information to a foundation affiliated with our PACE Program, provided that any fundraising communications explain clearly and conspicuously your right to opt out of future fundraising communications. We are required to honor your request to opt out.

Genetic Information. We are prohibited from using or disclosing your PHI that is genetic information for underwriting purposes.

III. USES AND DISCLOSURES WITH YOUR AUTHORIZATION

We will obtain your authorization for: (1) most uses and disclosures of psychotherapy notes (as defined by HIPAA); (2) uses and disclosures of your health information for marketing purposes; and (3) disclosures that constitute a sale of your health information. Except as described in this Notice, we will use and disclose your PHI only with your written Authorization. You may revoke an Authorization in writing at any time. If you revoke an Authorization, we will no longer use or disclose your PHI for the purposes covered by that Authorization, except where we have already relied on the Authorization.

IV. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

Listed below are your rights regarding your PHI. Each of these rights is subject to certain requirements, limitations and exceptions. Exercise of these rights may require submitting a written request to the PACE Program. At your request, the PACE Program will supply you with the appropriate form to complete.

Request Restrictions. You have the right to request restrictions on our use and disclosure of your PHI for treatment, payment, or health care operations. This includes the right to submit a written consent limiting the degree of information disclosed and the persons to whom information is disclosed. You also have the right to request restrictions on the health information we disclose about you to a family member, friend or other person who is involved in your care or the payment for your care. We are not required to agree to your requested restriction on how we use your health information within the PACE Program. We will limit disclosures outside the PACE Program (except for disclosures to the Centers for Medicare and Medicaid Services (“CMS”) and the state administering agency) in accordance with your written consent. We will grant requests to restrict use of protected health information within the PACE Program if they are reasonable and can be accommodated. If we do agree to accept your requested restriction, we will comply with your request except as needed to provide you emergency treatment or in accordance with applicable law.

Access to Personal Health Information. You have the right to inspect and obtain a copy of your clinical and billing records and other written information that may be used to make decisions about your care (“your designated record set”), subject to some exceptions. Your request must be made in writing. In most cases we may charge a reasonable fee for our costs in copying and mailing your requested information, consistent with applicable law.

To the extent we maintain one or more of your designated record sets electronically, you also have the right to receive an electronic copy of such information. You may also direct us to send a copy directly to a third-party designated by you. We may charge a fee, consistent with applicable law, for our costs in responding to your request.

Request Amendment. You have the right to request amendment of your PHI maintained by the PACE Program for as long as the information is kept by or for the PACE Program. Your request must be made in writing and must state the reason for the requested amendment.

We may deny your request for amendment if the information (a) was not created by the PACE Program, unless the originator of the information is no longer available to act on your request; (b) is not part of the PHI maintained by or for the PACE Program; (c) is not part of the information to which you have a right of access; or (d) is already accurate and complete, as determined by the PACE Program.

If we deny your request for amendment, we will give you a written denial including the reasons for the denial and an explanation of your right to submit a written statement disagreeing with the denial.

Request an Accounting of Disclosures. You have the right to request an “accounting” of certain disclosures of your PHI. This is a listing of disclosures made by the PACE Program or by others on our behalf, but does not include disclosures for treatment, payment and health care operations, disclosures made pursuant to your Authorization, and certain other exceptions.

To request an accounting of disclosures, you must submit a request in writing, stating a time period beginning after April 13, 2003 that is within six years from the date of your request. The first accounting provided within a 12-month period will be free; for further requests, we may charge you our costs.

Request a Paper Copy of This Notice. You have the right to obtain a paper copy of this Notice, even if you have agreed to receive this Notice electronically. You may request a copy of this Notice at any time. In addition, you may obtain a copy of this Notice at our website, (www.pacetriad.org.)

Request Confidential Communications. You have the right to request that we communicate with you concerning your health matters in a certain manner. We will accommodate your reasonable requests.

V. SPECIAL RULES REGARDING DISCLOSURE OF PSYCHIATRIC, SUBSTANCE ABUSE AND HIV- RELATED INFORMATION

Certain federal and state laws may require special privacy protections that restrict the use and disclosure of certain health information, including highly confidential information about you. “Highly confidential information” may include confidential information under Federal laws governing alcohol and drug abuse information and genetic information as well as state laws that often protect the following types of information:

1. HIV/AIDS;
2. Mental health;
3. Genetic tests;
4. Alcohol and drug abuse;
5. Sexually transmitted diseases and reproductive health information; and
6. Child or adult abuse or neglect, including sexual assault.

If a use or disclosure of health information described above in this notice is prohibited or materially limited by other laws that apply to us, it is our intent to meet the requirements of the more stringent law. See summaries of Federal and State laws, below.

VI. FOR FURTHER INFORMATION OR TO FILE A COMPLAINT

If you have any questions about this Notice or would like further information concerning your privacy rights, please contact the Executive Director at (336) 550-4040.

If you believe that your privacy rights have been violated, you may file a complaint in writing with the PACE Program or with the Office for Civil Rights in the U.S. Department of Health and Human Services (“OCR”). We will not retaliate against you for filing a complaint.

To file a complaint with the PACE Program, contact the Executive Director at (336) 550-4040.

To file a complaint with the OCR, send your written complaint to OCR by mail at Office for Civil Rights, U.S. Department of Health and Human Services, 200 Independence Avenue, S.W., Room 509F HHH Bldg., Washington, D.C. 20201 or by email to OCRComplaint@hhs.gov.

VII. CHANGES TO THIS NOTICE

We reserve the right to change this Notice and to make the revised or new Notice provisions effective for all PHI already received and maintained by the PACE Program as well as for all PHI we receive in the future. We will provide a copy of the revised Notice upon request.

 

Summary of Federal Laws

Alcohol & Drug Abuse Information
We are allowed to use and disclose alcohol and drug abuse information that is protected by federal law only (1) in certain limited circumstances, and/or disclose only (2) to specific recipients.
Genetic Information
We are not allowed to use genetic information for underwriting purposes.

 

Summary of State Laws

General Health Information
We are allowed to disclose general health information only (1) under certain limited circumstances, and /or (2) to specific recipients. CA, NE, PR, RI, VT, WA, WI
HMOs must give enrollees an opportunity to approve or refuse disclosures, subject to certain exceptions. KY
You may be able to restrict certain electronic disclosures of health information. NC, NV
We are not allowed to use health information for certain purposes. CA, IA
We will not use and/or disclose information regarding certain public assistance programs except for certain purposes. KY, MO, NJ, SD
We must comply with additional restrictions prior to using or disclosing your health information for certain purposes. KS
Prescriptions
We are allowed to disclose prescription-related information only (1) under certain limited circumstances, and /or (2) to specific recipients. ID, NH, NV
Communicable Diseases
We are allowed to disclose communicable disease information only (1) under certain limited circumstances, and /or (2) to specific recipients. AZ, IN, KS, MI, NV, OK

Sexually Transmitted Diseases and Reproductive Health
We are allowed to disclose sexually transmitted disease and/or reproductive health information only (1) under certain limited circumstances and/or (2) to specific recipients. CA, FL, IN, KS, MI, MT, NJ, NV, PR, WA, WY
Alcohol and Drug Abuse
We are allowed to use and disclose alcohol and drug abuse information (1) under certain limited circumstances, and/or disclose only (2) to specific recipients. AR, CT, GA, KY, IL, IN, IA, LA, MN, NC, NH, OH, WA, WI
Disclosures of alcohol and drug abuse information may be restricted by the individual who is the subject of the information. WA
Genetic Information
We are not allowed to disclose genetic information without your written consent. CA, CO, IL, KS, KY, LA, NY, RI, TN, WY
We are allowed to disclose genetic information only (1) under certain limited circumstances and/or (2) to specific recipients. AK, AZ, FL, GA, IA, MD, MA, MO, NJ, NV, NH, NM, OR, RI, TX, UT, VT
Restrictions apply to (1) the use, and/or (2) the retention of genetic information. FL, GA, IA, LA, MD, NM, OH, UT, VA, VT
HIV / AIDS
We are allowed to disclose HIV/AIDS-related information only (1) under certain limited circumstances and/or (2) to specific recipients. AZ, AR, CA, CT, DE, FL, GA, IA, IL, IN, KS, KY, ME, MI, MO, MT, NY, NC, NH, NM, NV, OR, PA, PR, RI, TX, VT, WV, WA, WI, WY
Certain restrictions apply to oral disclosures of HIV/AIDS-related information. CT, FL
We will collect certain HIV/AIDS-related information only with your written consent. OR
Mental Health
We are allowed to disclose mental health information only (1) under certain limited circumstances and/or (2) to specific recipients. CA, CT, DC, IA, IL, IN, KY, MA, MI, NC, NM, PR, TN, WA, WI
Disclosures may be restricted by the individual who is the subject of the information. WA
Certain restrictions apply to oral disclosures of mental health information. CT
Certain restrictions apply to the use of mental health information. ME
Child or Adult Abuse
We are allowed to use and disclose child and/or adult abuse information only (1) under certain limited circumstances, and/or disclose only (2) to specific recipients. AL, CO, IL, LA, MD, NE, NJ, NM, NY, RI, TN, TX, UT, WI