NOTICE OF PRIVACY PRACTICES
ALASKA HEART AND VASCULAR INSTITUTE (AHVI)
THIS NOTICE OF PRIVACY PRACTICES (THE “NOTICE”) DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Our Pledge Regarding Medical Information
We understand that medical information about you is personal and we are committed to protecting the privacy of your medical information. In the course of providing health care, we create a record of the care and services you receive in our facilities. We need this record to provide you with quality care and to comply with certain legal requirements. Your personal doctor or other health care providers involved in your care may have different policies or notices regarding their use and disclosure of your medical information created and/or maintained by them.
This Notice will tell you about the ways in which we may use and disclose your medical information, via any medium (written, oral, or electronic). We also describe your rights and certain obligations we have regarding the use and disclosure of medical information.
By law, we must:
- Maintain the privacy of your health information;
- Give you this Notice of our legal duties and privacy practices with respect to your medical information;
- Notify you if you are affected by a breach of unsecured health information; and
- Follow the terms of the Notice that is currently in effect.
Overview Our Uses and Disclosures
We may use and share your medical information for certain purposes, including to:
- Treat you
- Run our organization
- Bill for our services
- Perform research
- Comply with applicable laws
- Respond to organ and tissue donation requests
- Assist with public health and safety issues
- Respond to lawsuits and legal actions
- Work with a medical examiner or funeral director
- Address government requests
- Participate in a health information exchange (“HIE”)
You have the right to:
- Receive a copy of your paper or electronic medical record
- Request that we send your medical information to another person or entity
- Correct your paper or electronic medical record
- Request that we limit the information we share
- Request confidential communications
- Choose how we communicate with your family and friends about your condition
- Receive a copy of this Notice
- Be notified if you are affected by a breach of unsecured health information
- File a complaint if you believe your privacy rights have been violated
Please see below for additional information on our uses and disclosures of your medical information and your rights.
How We May Use and Disclose Your Medical Information
Sometimes we are allowed by law to use and disclose certain medical information without your written permission. How much medical information is used or disclosed without your written permission will vary on the intended purpose of the use or disclosure, etc. Sometimes we may only need to use or disclose a limited amount of information, such as to send you an appointment reminder. At other times, we may need to use or disclose more information such as when we are providing medical treatment. We briefly describe these uses and disclosures below and provide you with some examples.
Disclosure at Your Request. We may disclose information when requested by you.
For Treatment. This is the most important use and disclosure of your medical information. For example, physicians, nurses, and other health care personnel, including trainees, involved in your care use and disclose your PHI to diagnose your condition and evaluate your health care need. We will use and disclose your medical information in order to provide and coordinate the care and services you need. If you need care from health care providers not part of AHVI, we may disclose your medical information to them.
For Payment. We may use and disclose your medical information to obtain payment for our services. For example, your medical information may be released to an insurance company to get pre-approval of, or payment for, our services.
For Health Care Operations. We may use and disclose your medical information for health care operations, such as to conduct quality assessment activities, train or arrange for legal services. For example, we may use medical information to review our treatment and services and to evaluate the performance of our staff in caring for you.
To Business Associates. We may share your medical information with “Business Associates,” as defined by the Health Insurance Portability and Accountability Act (“HIPAA”), who provide services to or on behalf of Adventist Health.
For Appointment Reminders, Test Results, Treatment Alternatives, etc. We may use your medical information to contact you to remind you about appointments, to inform you about test results or to advise you of treatment alternatives.
For Fundraising Activities. We may use your health information to contact you about our fundraising efforts. You have the right to opt-out of receiving fundraising communications. If we contact you for fundraising purposes, we will provide you with a clear opportunity to elect not to receive any further fundraising communications.
Marketing and Sale. Most uses and disclosures of medical information for marketing purposes, and disclosures that constitute a sale of medical information, require your authorization.
Individuals Involved in Your Care. Sometimes a family member or other person involved in your care will be present when we are discussing your medical information with you. If you object, please tell us and we won’t discuss your medical information or we will politely ask the individual to leave.
Unless you tell us in writing that you object, we may use or disclose your medical information to notify a friend, family member or legal guardian who is involved in your care or who helps pay for your care. In addition, we may disclose your medical information to an organization assisting in a disaster relief effort so that your family can be notified about your condition, status and location.
Research. We may use and disclose your Protected Health Information for research purposes, but we will only do that if the research has been specially approved by an authorized institutional review board or a privacy board that has reviewed the research proposal and has set up protocols to ensure the privacy of your Protected Health Information. Even without that special approval, we may permit researchers to look at Protected Health Information to help them prepare for research, for example, to allow them to identify patients who may be included in their research project, as long as they do not remove, or take a copy of, any Protected Health Information. We may use and disclose a limited data set that does not contain specific readily identifiable information about you for research. However, we will only disclose the limited data set if we enter into a data use agreement with the recipient who must agree to (1) use the data set only for the purposes for which it was provided, (2) ensure the confidentiality and security of the data, and (3) not identify the information or use it to contact any individual.
As Required by Law. We will disclose your medical information when required to do so by federal, state, or local law.
To Avert a Serious Threat to Health or Safety. We may use and disclose your medical information when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person. Any disclosure, however, would only be to someone able to help prevent the threat. For example, if you were involved in a violent crime, disclosure may be made to law enforcement.
Health Information Exchange. We may share your medical information electronically with other organizations through one or more Health Information Exchanges (each, an “HIE”). Such organizations may include hospitals, laboratories, health care providers, public health departments, health plans, and other participants. The goal of the HIE is to enable participating providers to provide you with more coordinated and efficient care by sharing your medical information through secure, electronic means. For example, if you go to a hospital emergency room that participates in the same HIE network as AHVI, the emergency room physicians would be able to access your medical information to help make treatment decisions for you.
HIE participants, like AHVI, are required to meet rules that protect the privacy and security of your medical information. To obtain a list of the HIE(s) we participate in or to choose not to have your information shared through our HIE(s) (i.e., “opt out”) please contact the Privacy Officer or the Health Information Management department at the AHVI location where your medical information is maintained.
If you opt out, the health care providers treating you could call AHVI to ask that your medical information be provided in another way, such as by fax, instead of accessing the information through the HIE network.
Organ and Tissue Donation. If you are an organ or tissue donor, we may release medical information to organizations that handle organ procurement or organ, eye, or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.
Military Veterans. If you are a member of the armed forces or reserve member, we may disclose your medical information to military authorities when they believe it is necessary to properly carry out military missions.
Public Health and Safety. We may use and disclose your medical information to prevent or control a serious threat to the health and safety of you, others or the public and for public health activities, such as to prevent injury.
Health Oversight Activities. We may disclose medical information to a health oversight agency for activities authorized by law. These oversight activities include, for example, audits, investigations, inspections, and licensure.
Lawsuits and Disputes. We may share your medical information in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute. We will attempt to ensure that you have been made aware of the use or disclosure of your medical information prior to providing it to another person.
Law Enforcement. We may share your medical information with a law enforcement official to identify or locate a suspect, fugitive, material witness or missing person; comply with a court order or grand jury subpoena; and as authorized or required by law or other law enforcement purposes. For example, we may be required by law to report certain types of wounds or other physical injuries.
Coroners, Medical Examiners and Funeral Directors. We may release medical information to a coroner, medical examiner or funeral director to enable them to carry out their duties.
National Security and Intelligence Activities. We may release your medical information to authorized local or national security or other law enforcement agencies for the protection of certain persons or to conduct a special investigation.
Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release your medical information to the correctional institution or law enforcement official. This release would be necessary (1) for the institution to provide you with health care, (2) to protect your health and safety or the health and safety of others, or (3) for the safety and security of the correctional institution.
Multidisciplinary Personnel Teams. We may disclose health information to a multidisciplinary personnel team relevant to the prevention, identification, management or treatment of an abused child and the child’s parents or elder abuse and neglect. If we reasonably believe you are a victim of abuse, neglect or domestic violence, we may use and disclose your medical information to a governmental authority, including a social service or protective services agency, authorized by law to receive reports of such abuse, neglect or domestic violence.
Special Categories of Information. In some circumstances, your health information may be subject to restrictions that may limit or preclude some uses or disclosures described in this Notice. For example, there are special restrictions on the use or disclosure of certain categories of information (e.g., tests for HIV or treatment for mental health conditions or alcohol and drug abuse). Government health benefit programs, such as Medicaid, may also limit the disclosure of beneficiary information for purposes unrelated to the program.
Your Rights Regarding Your Medical Information
You have the following rights regarding medical information that we maintain about you. You must submit your request in writing to the Privacy Officer to exercise any of these rights.
Right to Request Information About You. You have the right to inspect and receive a paper or electronic copy of your medical information maintained by us and used in decisions about your care by submitting your request in writing to our Health Information Management department.
You may also request that we send copies directly to another person or entity chosen by you. We may charge a reasonable cost-based fee for the costs of copying, mailing or other supplies associated with your request. We may deny your request in certain circumstances. You may request a licensed health care professional chosen by us to review a denial based on medical reasons; we will comply with this decision.
Right to Amend. If you believe that the medical information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for AHVI. We cannot delete or destroy any information already included in your medical record. You must provide a reason for your request.
We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that:
- Was not created by us, unless the person or entity that created the information is not available to make the amendment;
- Is not part of the medical information kept by or for AHVI;
- Is not part of the information which you would be permitted by law to inspect and copy; or
- Is accurate and complete.
Even if we deny your request for amendment, you have the right to submit a written addendum, not to exceed 250 words, with respect to any item or statement in your record you believe is incomplete or incorrect. If you clearly indicate in writing that you want the addendum to be made part of your medical record, we will attach it to your medical record and include it whenever we make a disclosure of the item or statement you believe to be incomplete or incorrect.
Right to an Accounting of Disclosures. You have the right to request an “accounting of disclosures.” This is a list of the disclosures we made of your medical information. We are not required to list all disclosures, such as those you authorized or disclosures made for treatment, payment, health care operations or certain other purposes. You must state a time period, which may not be longer than 6 years or include dates before April 14, 2016. You may obtain one accounting in a 12-month period for free; we may charge you a reasonable fee for additional accountings of disclosures.
Right to Request Restrictions. You have the right to request a restriction or limitation on how we use or disclose your medical information. You must be specific in your request for restriction. You also have the right to request a limit on the medical information we disclose about you to someone who is involved in your care or the payment for your care, like a family member or friend. For example, you could ask that we not use or disclose information about a surgery you had.
We are not required to agree to your request, except when the disclosure is to a health plan or insurer for payment or health care operations purposes if you, or someone else on your behalf (other than the health plan or insurer), has paid for the item or service out of pocket in full and the disclosure is for the purpose of carrying out payment or health care operations and not otherwise required by law. Even if you request this special restriction, we can disclose the information to a health plan or insurer for purposes of treating you. If we do agree to another special restriction, we will comply with your request unless the information is needed to provide you emergency treatment.
To request restrictions, you must make your request in writing to the Privacy Officer. In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure or both; and (3) to whom you want the limits to apply (for example, disclosures to your spouse).
Right to Request Confidential Communications. You have the right to request that we communicate with you about medical matters in a certain way. For example, you can ask that we only contact you at work or by mail. To request confidential communications, you must make your request in writing to the Privacy Officer. We will not ask you the reason for your request. We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.
Right to a Copy of this Notice. You have the right to a paper or electronic copy of this Notice, which is posted and available at each location where medical services are provided and is on our Website at https://www.alaskaheart.org . Even if you have agreed to receive this Notice electronically, you are still entitled to a paper copy of this Notice.
We reserve the right to change this Notice. We reserve the right to make the revised or changed notice effective for medical information we already have about you, as well as any information we receive in the future. We will post a copy of the current Notice on our Internet site and patient portal. You may also obtain a copy of the current Notice, by contacting the Privacy Officer. In addition, each time you register for treatment or health care services as an outpatient, a copy of the current Notice will be available upon request.
Questions or Complaints
If you have questions or believe your privacy rights have been violated, you may contact the Privacy Officer. All complaints must be made in writing and should be submitted within 180 days of when you knew or should have known of the suspected violation. There will be no retaliation against you for filing a complaint.
Mailing Address: 3841 Piper Street, Suite T-100, Anchorage, AK 99508
In addition, you may file a complaint with the Office for Civil Rights of the U.S. Department of Health and Human Services by emailing OCRComplaint@hhs.gov, visiting www.hhs.gov/ocr/privacy/hipaa/complaints, or sending a letter to:
Centralized Case Management Operations U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Room 509F HHH Bldg.
Washington, D.C. 20201.
We will not take any action against you for filing a complaint.
Other Uses of Medical Information
Other uses and disclosures of medical information not described in this Notice will be made only with your written permission. We will obtain your written permission for: (1) most uses and disclosures of psychotherapy notes; (2) most uses and disclosures of health information for marketing purposes, as defined by HIPAA; and (3) disclosures that constitute a sale of protected health information, as defined by HIPAA. If you provide us permission to use or disclose medical information about you, you may revoke that permission, in writing, at any time. If you revoke your permission, your revocation will be effective upon receipt, but will not be effective to the extent that we or others have acted in reliance upon such permission.
EFFECTIVE DATE OF THIS NOTICE
This Notice is effective April 19, 2022.