Your Rights Under the Privacy Rule
Following is a statement of your rights, under the Privacy Rule, in reference to your PHI. Please feel free to discuss any questions with our staff.
You have the right to receive, and we are required to provide you with, a copy of this Notice of Privacy Practices – We are required by law to follow the terms of this Notice. We reserve the right to change the terms of the Notice, and to make the new Notice provisions effective for all PHI that we maintain. We will provide you with a copy of our current Notice if you call our office and request that a copy be sent to you in the mail, or ask for one at the time of your next appointment. The Notice will also be posted in a conspicuous location in the practice, and if such is maintained, on the practice’s web site.
You have the right to authorize other use and disclosure – This means we will only use or disclose your PHI as described in this notice, unless you authorize other use or disclosure in writing. For example, we would need your written authorization to use or disclose your PHI for marketing purposes, for most uses or disclosures of psychotherapy notes, or if we intended to sell your PHI. You may revoke an authorization, at any time, in writing, except to the extent that your healthcare provider, or our practice has taken an action in reliance on the use or disclosure indicated in the authorization.
You have the right to request an alternative means of confidential communication – This means you have the right to ask us to contact you about medical matters using an alternative method (i.e., email, fax, telephone), and/or to a destination (i.e., cell phone number, alternative address, etc.) designated by you. You must inform us in writing, using a form provided by our practice, how you wish to be contacted if other than the address/phone number that we have on file. We will follow all reasonable requests.
You have the right to inspect and obtain a copy your PHI* – This means you may submit a written request to inspect or obtain a copy of your complete health record, or to direct us to disclose your PHI to a third party. If your health record is maintained electronically, you will also have the right to request a copy in electronic format. We have the right to charge a reasonable, cost-based fee for paper or electronic copies as established by federal guidelines. We are required to provide you with access to your records within 30 days of your written request unless an extension is necessary. In such cases, we will notify you of the reason for the delay, and the expected date when the request will be fulfilled.
You have the right to request a restriction of your PHI* – This means you may ask us, in writing, not to use or disclose any part of your protected health information for the purposes of treatment, payment or healthcare operations. If we agree to the requested restriction, we will abide by it, except in emergency circumstances when the information is needed for your treatment. In certain cases, we may deny your request for a restriction. You will have the right to request, in writing, that we restrict communication to your health plan regarding a specific treatment or service that you, or someone on your behalf, has paid for in full, out-of-pocket. We are not permitted to deny this specific type of requested restriction.
You have the right to request an amendment to your protected health information* – This means you may submit a written request to amend your PHI for as long as we maintain this information. In certain cases, we may deny your request.
You have the right to request a disclosure accountability* – You may submit a written request for a listing of disclosures we have made of your PHI to entities or persons outside of our practice except for those made upon your request, or for purposes of treatment, payment or healthcare operations. We will not charge a fee for the first accounting provided in a 12-month period.
You have the right to receive a privacy breach notice – You have the right to receive written notification if the practice discovers a breach of your unsecured PHI, and determines through a risk assessment that notification is required.
*If you have questions regarding your privacy rights, or would like to submit any type of written request described above, please feel free to contact our Privacy Manager. Contact information is provided at the bottom of the page.