I. THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
The terms of this Notice of Privacy Practices apply to University of Cincinnati Physicians, University of Cincinnati Physicians Company and the UC Health entities with which they are affiliated including University of Cincinnati Medical Center, West Chester Hospital, Drake Center, UC Primary Care Network and other licensed professionals as part of a clinically integrated health care arrangement seeing and treating patients at each UC Health facility. All of the UC Health facilities and licensed professionals will share protected health information of patients as necessary to carry out treatment, payment, and health care operations as permitted by law.
II. WE HAVE A LEGAL DUTY TO SAFEGUARD YOUR PROTECTED HEALTH INFORMATION
We are required by law to maintain the privacy of our patients’ personal health information. We call this information “protected health information” or PHI for short. We must provide patients with notice of our legal duties and privacy practices with respect to PHI. We are required to abide by the terms of this Notice so long as it remains in effect. We reserve the right to change the terms of this Notice of Privacy Practices as necessary and to make the new Notice effective for all PHI maintained by us. You may receive a paper copy of this or any revised notices at the location where you receive your health care or you may view a copy of the notice on our Web site at www.uchealth.com.
III. USES AND DISCLOSURES OF YOUR PROTECTED HEALTH INFORMATION
Your Authorization. We will not use or disclose your PHI for any purpose other than treatment, payment and health care operations unless you have signed a form authorizing the use or disclosure with the exception of the situations outlined below. You have the right to revoke that authorization in writing unless we have taken any action in reliance on the authorization.
Uses and Disclosures for Treatment. We will make uses and disclosures of your PHI as necessary for your treatment. For instance, doctors and nurses and other professionals involved in your care will use information in your medical record and information that you provide about your symptoms and reactions to plan a course of treatment for you that may include procedures, medications and tests.
Uses and Disclosures for Payment. We will make uses and disclosures of your PHI as necessary for payment purposes. For instance, we may forward information regarding your medical procedures and treatment to your insurance company to arrange payment for the services provided to you or we may use your information to prepare a bill to send to you or to the person responsible for your payment. We may make uses and disclosures of your PHI to another entity or health care provider for payment of the entity that receives the information. For instance, we may forward information to the pharmacy or laboratory that provides service to you.
Uses and Disclosures for Health Care Operations. We will use and disclose your PHI as necessary, and as permitted by law, for our health care operations which include clinical improvement, professional peer review, business management, accreditation and licensing. For instance, we may use and disclose your PHI for purposes of improving the clinical treatment and care of our patients.
Electronic Medical Record. We use a shared electronic medical record in our offices and UC Health clinics. You have the right to receive your records that are held in an electronic medical record in that format upon request.
Our Facility Directory. UC Health maintains a facility directory listing the name, room number, general condition and, if the patient wishes, religious affiliation. Unless you choose to have your information excluded from this directory, the information, excluding your religious affiliation, will be disclosed to anyone who requests it by asking for you by name. This information, including your religious affiliation, may also be provided to members of the clergy. You have the right during registration to have your information excluded from this directory and also to restrict what information is provided.
Family and Friends Involved In Your Care. With your approval, we may disclose your PHI to designated family, friends, and others who are involved in your care or in payment of your care in order to facilitate your care or payment for your care. If you are unavailable, incapacitated, or facing an emergency medical situation and we determine that a limited disclosure may be in your best interest, we may share limited PHI with such individuals without your approval. We may also disclose limited PHI to a public or private entity that is authorized to assist in disaster relief efforts in order for that entity to locate a family member or other persons that may be involved in some aspect of caring for you.
Business Associates. Certain aspects and components of our services are performed through contracts with outside persons or organizations, such as auditing, accreditation, legal services, etc. At times it may be necessary for us to provide certain of your PHI to one or more of these outside persons or organizations who assist us with our health care operations. In all cases, business associates are required to appropriately safeguard the privacy of your information.
Fundraising. We may contact you to donate to a fundraising effort for or on our behalf. You have the right to “opt-out” of receiving fundraising materials or communications and may do so by sending your name and address to:
Development Office, University of Cincinnati Medical Center, 234 Goodman Street, Cincinnati, OH, 45219 or contacting the University of Cincinnati Medical Center at 513-584-1000
Development Office, West Chester Hospital, 7700 University Drive, West Chester, OH 45069 or by contacting West Chester Hospital at 513-298-3000
Development Office, Drake Center, 151 W. Galbraith Avenue, Cincinnati, OH 45216 or by contacting Drake Center at 513-418-2500
Please include a brief statement with your wish not to receive fundraising materials or communications from us.
Marketing. We must receive your authorization for any use or disclosure of PHI for marketing, except if the communication is in the form of a face-to-face communication made to you personally; or a promotional gift of nominal value provided by UC Health. It is not considered marketing to send you information related to your individual treatment, case management, and care coordination or to direct or recommend alternative treatment, therapies, health care providers or settings of care. These may be sent without written permission. If the marketing is to result in direct or indirect payment to the UC Health by a third party we will state this on the authorization.
Appointments and Services. We may contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you. You have the right to request to receive communications regarding your PHI from us by alternative means or at alternative locations. We agree to comply with reasonable requests. For instance, if you wish appointment reminders to not be left on voice mail or sent to a particular address, we will accommodate reasonable requests. You must request such confidential communication in writing and send your request to:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, West Chester, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
Confidentiality of Alcohol and Drug Abuse Records. Federal law and regulations protect the confidentiality of alcohol and drug program records maintained by us. PHI containing information on your alcohol or drug use may not be disclosed without 1) your written authorization; 2) a court order; or 3) unless the disclosure is made to medical personnel in a medical emergency or to qualified personnel for research, audit or program evaluation. Federal law or regulations do not protect any information about a crime committed by you at our facility or about any threat to commit a crime. Federal laws and regulations do not protect any information about suspected child abuse or neglect from being reported under State law to appropriate State or local authorities.
Other Uses and Disclosures. We are permitted or required by law to make certain other uses and disclosures of your PHI without your authorization.
We may release your PHI for any purpose required by law; if we suspect child abuse or neglect; if we believe you to be a victim of abuse, neglect, or domestic violence; to law enforcement officials as required by law to report wounds, injuries and crimes; if required by law to a government oversight agency conducting audits, investigations, or civil or criminal proceedings; and if required to do so by a court or administrative ordered subpoena or discovery request; in most cases you will have notice of such release;
We may release your PHI for public health activities, such as required reporting of disease, injury, and birth and death, and for required public health investigations; we may release your PHI to coroners and/or funeral directors consistent with law;
We may release your PHI to the Food and Drug Administration if necessary to report adverse events, product defects, or to participate in product recalls;
We may release your PHI to your employer when we have provided health care to you at the request of your employer; in most cases you will receive notice that information is disclosed to your employer;
We may release your PHI if necessary to arrange an organ or tissue donation from you or a transplant for you;
We may release your PHI if in limited instances we suspect a serious threat to health or safety;
We may release your PHI for certain research purposes without your authorization when such research is approved by an institutional review board with established rules to ensure privacy or with researcher representation that limit the use and disclosure of the PHI;
We may release your PHI if you are a member of the military as required by armed forces services; we may also release your PHI if necessary for national security or intelligence activities; and
We may release your PHI to workers’ compensation agencies if necessary for your workers’ compensation benefit determination.
Ohio law requires that we have your authorization or a court order before disclosing the results of an HIV test or diagnosis of AIDS or AIDS-related condition.
IV. RIGHTS THAT YOU HAVE REGARDING YOUR PHI
Access to Your Protected Health Information. You have the right to receive a copy and/or inspect much of the PHI we retain on your behalf, unless excluded by law. All requests for access must be made in writing and signed by you or your legal representative. We may charge you a fee for copying the information and for postage if you request a mailed copy. You may obtain an access request form from:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, Cincinnati, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
Amendments to Your Protected Health Information. You have the right to request in writing that PHI that we maintain about you be amended. We are not obligated to make all requested amendments but will give each request careful consideration. All amendment requests, in order to be considered by us, must be in writing, signed by you or your representative, and must state the reasons for the amendment request. If an amendment you request is made by us, we may also notify others who work with us and have copies of the uncorrected record if we believe that such notification is necessary. You may obtain an amendment request form from:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati, OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, West Chester, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
Accounting for Disclosures of Your Protected Health Information.) You have the right to receive an accounting of certain disclosures made by us of your PHI after April 14, 2003. Requests must be made in writing and signed by you or your legal representative. Accounting request forms are available from:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, West Chester, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
The first accounting in any 12-month period is free; you will be charged a reasonable fee as allowed by law for each subsequent accounting you request within the same 12-month period.
Restrictions on Use and Disclosure of Your Protected Health Information. You have the right to request a restriction on the uses and disclosures of your PHI for treatment, payment and health care operations. We are not required to agree to your restriction request but will attempt to accommodate reasonable requests when appropriate and we retain the right to terminate an agreed-to restriction if we believe such termination is appropriate. In the event of a termination by us, we will notify you of such termination. You also have the right to terminate, in writing, any agreed-to restriction by sending such termination notice to:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, West Chester, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
UC Health will agree to a restriction on the disclosure of your protected health information to a health plan if:
The disclosure is for the purposes of carrying out payment or health care operations and is not otherwise required by law; and the protected health information pertains solely to a health care item or service that you and not your health plan have paid UC Health for in full out of pocket.
V. HOW TO COMPLAIN ABOUT OUR PRIVACY PRACTICES
If you believe your privacy rights have been violated, you may file a complaint in writing to the UC Health Privacy Office, 3200 Burnet Avenue, Cincinnati OH 45229 or you may call 513-585-7155. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights, Region V, 233 N. Michigan Avenue, Suite 240, Chicago, IL 60601 in writing within 180 days of an alleged violation of your rights. You may file a complaint electronically by visiting the Office for Civil Rights HIPAA website at www.hhs.gov/ocr/privacy. There will be no retaliation for filing a complaint.
VI. PERSON TO CONTACT FOR FURTHER INFORMATION OR ASSISTANCE
If you have questions or need further assistance regarding this Notice, you may contact the Patient Representative at University of Cincinnati Medical Center, West Chester Hospital or Drake Center. As a patient you retain the right to obtain a paper copy of this Notice of Privacy Practices, even if you have requested such copy by e-mail or other electronic means.
VII. EFFECTIVE DATE
This Notice of Privacy Practices became effective July 1, 2011.
Notice of Privacy Practices
University of Cincinnati Physicians
and University of Cincinnati Physicians Company
Notice of Privacy Practices
I. THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
The terms of this Notice of Privacy Practices apply to University of Cincinnati Physicians, University of Cincinnati Physicians Company and the UC Health entities with which they are affiliated including University of Cincinnati Medical Center, West Chester Hospital, Drake Center, UC Primary Care Network and other licensed professionals as part of a clinically integrated health care arrangement seeing and treating patients at each UC Health facility. All of the UC Health facilities and licensed professionals will share protected health information of patients as necessary to carry out treatment, payment, and health care operations as permitted by law.
II. WE HAVE A LEGAL DUTY TO SAFEGUARD YOUR PROTECTED HEALTH INFORMATION
We are required by law to maintain the privacy of our patients’ personal health information. We call this information “protected health information” or PHI for short. We must provide patients with notice of our legal duties and privacy practices with respect to PHI. We are required to abide by the terms of this Notice so long as it remains in effect. We reserve the right to change the terms of this Notice of Privacy Practices as necessary and to make the new Notice effective for all PHI maintained by us. You may receive a paper copy of this or any revised notices at the location where you receive your health care or you may view a copy of the notice on our Web site at www.uchealth.com.
III. USES AND DISCLOSURES OF YOUR PROTECTED HEALTH INFORMATION
Your Authorization. We will not use or disclose your PHI for any purpose other than treatment, payment and health care operations unless you have signed a form authorizing the use or disclosure with the exception of the situations outlined below. You have the right to revoke that authorization in writing unless we have taken any action in reliance on the authorization.
Uses and Disclosures for Treatment. We will make uses and disclosures of your PHI as necessary for your treatment. For instance, doctors and nurses and other professionals involved in your care will use information in your medical record and information that you provide about your symptoms and reactions to plan a course of treatment for you that may include procedures, medications and tests.
Uses and Disclosures for Payment. We will make uses and disclosures of your PHI as necessary for payment purposes. For instance, we may forward information regarding your medical procedures and treatment to your insurance company to arrange payment for the services provided to you or we may use your information to prepare a bill to send to you or to the person responsible for your payment. We may make uses and disclosures of your PHI to another entity or health care provider for payment of the entity that receives the information. For instance, we may forward information to the pharmacy or laboratory that provides service to you.
Uses and Disclosures for Health Care Operations. We will use and disclose your PHI as necessary, and as permitted by law, for our health care operations which include clinical improvement, professional peer review, business management, accreditation and licensing. For instance, we may use and disclose your PHI for purposes of improving the clinical treatment and care of our patients.
Electronic Medical Record. We use a shared electronic medical record in our offices and UC Health clinics. You have the right to receive your records that are held in an electronic medical record in that format upon request.
Our Facility Directory. UC Health maintains a facility directory listing the name, room number, general condition and, if the patient wishes, religious affiliation. Unless you choose to have your information excluded from this directory, the information, excluding your religious affiliation, will be disclosed to anyone who requests it by asking for you by name. This information, including your religious affiliation, may also be provided to members of the clergy. You have the right during registration to have your information excluded from this directory and also to restrict what information is provided.
Family and Friends Involved In Your Care. With your approval, we may disclose your PHI to designated family, friends, and others who are involved in your care or in payment of your care in order to facilitate your care or payment for your care. If you are unavailable, incapacitated, or facing an emergency medical situation and we determine that a limited disclosure may be in your best interest, we may share limited PHI with such individuals without your approval. We may also disclose limited PHI to a public or private entity that is authorized to assist in disaster relief efforts in order for that entity to locate a family member or other persons that may be involved in some aspect of caring for you.
Business Associates. Certain aspects and components of our services are performed through contracts with outside persons or organizations, such as auditing, accreditation, legal services, etc. At times it may be necessary for us to provide certain of your PHI to one or more of these outside persons or organizations who assist us with our health care operations. In all cases, business associates are required to appropriately safeguard the privacy of your information.
Fundraising. We may contact you to donate to a fundraising effort for or on our behalf. You have the right to “opt-out” of receiving fundraising materials or communications and may do so by sending your name and address to:
Development Office, University of Cincinnati Medical Center, 234 Goodman Street, Cincinnati, OH, 45219 or contacting the University of Cincinnati Medical Center at 513-584-1000
Development Office, West Chester Hospital, 7700 University Drive, West Chester, OH 45069 or by contacting West Chester Hospital at 513-298-3000
Development Office, Drake Center, 151 W. Galbraith Avenue, Cincinnati, OH 45216 or by contacting Drake Center at 513-418-2500
Please include a brief statement with your wish not to receive fundraising materials or communications from us.
Marketing. We must receive your authorization for any use or disclosure of PHI for marketing, except if the communication is in the form of a face-to-face communication made to you personally; or a promotional gift of nominal value provided by UC Health. It is not considered marketing to send you information related to your individual treatment, case management, and care coordination or to direct or recommend alternative treatment, therapies, health care providers or settings of care. These may be sent without written permission. If the marketing is to result in direct or indirect payment to the UC Health by a third party we will state this on the authorization.
Appointments and Services. We may contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you. You have the right to request to receive communications regarding your PHI from us by alternative means or at alternative locations. We agree to comply with reasonable requests. For instance, if you wish appointment reminders to not be left on voice mail or sent to a particular address, we will accommodate reasonable requests. You must request such confidential communication in writing and send your request to:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, West Chester, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
Confidentiality of Alcohol and Drug Abuse Records. Federal law and regulations protect the confidentiality of alcohol and drug program records maintained by us. PHI containing information on your alcohol or drug use may not be disclosed without 1) your written authorization; 2) a court order; or 3) unless the disclosure is made to medical personnel in a medical emergency or to qualified personnel for research, audit or program evaluation. Federal law or regulations do not protect any information about a crime committed by you at our facility or about any threat to commit a crime. Federal laws and regulations do not protect any information about suspected child abuse or neglect from being reported under State law to appropriate State or local authorities.
Other Uses and Disclosures. We are permitted or required by law to make certain other uses and disclosures of your PHI without your authorization.
IV. RIGHTS THAT YOU HAVE REGARDING YOUR PHI
Access to Your Protected Health Information. You have the right to receive a copy and/or inspect much of the PHI we retain on your behalf, unless excluded by law. All requests for access must be made in writing and signed by you or your legal representative. We may charge you a fee for copying the information and for postage if you request a mailed copy. You may obtain an access request form from:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, Cincinnati, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
Amendments to Your Protected Health Information. You have the right to request in writing that PHI that we maintain about you be amended. We are not obligated to make all requested amendments but will give each request careful consideration. All amendment requests, in order to be considered by us, must be in writing, signed by you or your representative, and must state the reasons for the amendment request. If an amendment you request is made by us, we may also notify others who work with us and have copies of the uncorrected record if we believe that such notification is necessary. You may obtain an amendment request form from:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati, OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, West Chester, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
Accounting for Disclosures of Your Protected Health Information.) You have the right to receive an accounting of certain disclosures made by us of your PHI after April 14, 2003. Requests must be made in writing and signed by you or your legal representative. Accounting request forms are available from:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, West Chester, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
The first accounting in any 12-month period is free; you will be charged a reasonable fee as allowed by law for each subsequent accounting you request within the same 12-month period.
Restrictions on Use and Disclosure of Your Protected Health Information. You have the right to request a restriction on the uses and disclosures of your PHI for treatment, payment and health care operations. We are not required to agree to your restriction request but will attempt to accommodate reasonable requests when appropriate and we retain the right to terminate an agreed-to restriction if we believe such termination is appropriate. In the event of a termination by us, we will notify you of such termination. You also have the right to terminate, in writing, any agreed-to restriction by sending such termination notice to:
University of Cincinnati Physicians, Privacy Official, 222 Piedmont Avenue, Suite 1200, Cincinnati, OH 45219-4209
University of Cincinnati Medical Center, Medical Records Department, 234 Goodman Street, Cincinnati OH 45219
West Chester Hospital, Medical Records Department, 7700 University Drive, West Chester, OH 45069
Drake Center, Medical Records Department, 151 W. Galbraith Avenue, Cincinnati, OH 45216
UC Health will agree to a restriction on the disclosure of your protected health information to a health plan if:
The disclosure is for the purposes of carrying out payment or health care operations and is not otherwise required by law; and the protected health information pertains solely to a health care item or service that you and not your health plan have paid UC Health for in full out of pocket.
V. HOW TO COMPLAIN ABOUT OUR PRIVACY PRACTICES
If you believe your privacy rights have been violated, you may file a complaint in writing to the UC Health Privacy Office, 3200 Burnet Avenue, Cincinnati OH 45229 or you may call 513-585-7155. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights, Region V, 233 N. Michigan Avenue, Suite 240, Chicago, IL 60601 in writing within 180 days of an alleged violation of your rights. You may file a complaint electronically by visiting the Office for Civil Rights HIPAA website at www.hhs.gov/ocr/privacy. There will be no retaliation for filing a complaint.
VI. PERSON TO CONTACT FOR FURTHER INFORMATION OR ASSISTANCE
If you have questions or need further assistance regarding this Notice, you may contact the Patient Representative at University of Cincinnati Medical Center, West Chester Hospital or Drake Center. As a patient you retain the right to obtain a paper copy of this Notice of Privacy Practices, even if you have requested such copy by e-mail or other electronic means.
VII. EFFECTIVE DATE
This Notice of Privacy Practices became effective July 1, 2011.