Patient Confidentiality 

A patient’s health record and other information related to their medical treatment are confidential to the patient. Employees, Mangers, Owners and Contractors who have access to confidential patient health information must protect against its unauthorized disclosure, and the Company has developed privacy and security policies to address the requirements of Federal and State laws governing such information (“HIPAA Policies”).  Employees, Managers, Owners and Contractors may only discuss or otherwise disclose patient information as minimally necessary for the purpose of treatment, payment or operations (“TPO”) in accordance with the Company’s HIPAA policies and applicable Federal and State laws. Disclosure of patient information for non-TPO purposes typically requires written authorization by the patient or the patient’s legal representative. CarePlus Urgent Care’s HIPAA policy is noted below.  The unauthorized disclosure of patient information by an Employees, Mangers, Owners and Contractors, or the disclosure of more patient information than is minimally necessary, may expose CarePlus to liability for breach of confidentiality and may result in adverse employment action including, without limitation, termination. Patient records must be safeguarded against loss, destruction or unauthorized access, use or disclosure in accordance with Federal and State privacy laws. Patients’ paper records may not be physically removed from the work premises and any patient records transmitted to an authorized person outside of CarePlus should be transmitted in a secured manner (e.g., secure fax receipt; US postal or other secure delivery service; password protected electronic data transmittal). No Employee, Manger, Owner or Contractor may access patient information without a legitimate, business reason such as the provision or documentation of treatment, payment or other job-related operational purpose.

1.  HIPAA The Health Insurance Portability and Accountability Act of 1996, as amended (referred to herein as “HIPAA”) includes provisions commonly known as the Privacy Rule and the Security Rule designed to protect the privacy of individually identifiable health information and to prevent its unauthorized disclosure. Protected health information (PHI) is any information that relates to the physical or mental health or condition of an individual, provision of health care to the individual, or payment for health care that identifies the individual or that is created or received by a covered entity. HIPAA also includes provisions to standardize electronic claims processing transactions that are applicable to CarePlus.

2. CarePlus Urgent Care HIPPA POLICY 

HIPAA & Privacy Policy

This Notice describes how health information about you may be used and how you can get access to this information.

Please review this Notice carefully.

OUR DUTY TO SAFEGUARD YOUR PROTECTED HEALTH INFORMATION

We understand that health information about you is personal, and we are committed to protecting this information. This Notice applies to all of your protected health information maintained by us, including records relating to your care at CarePlus Urgent Care and/or healthcare records received by us from another source. We are required by HIPAA to:

1. Maintain the privacy of your PHI;

2. Provide you with this Notice as to our legal duties and practices with respect to PHI;

3. Notify you following a breach of unsecured PHI; and

4. Follow the terms of the Notice currently in effect.

OUR PLEDGE REGARDING YOUR PROTECTED HEALTH INFORMATION

The following categories describe different ways we may use and disclose your PHI:

• For Treatment. We may use or disclose your PHI for treatment, such as to physicians, nurses, nurse practitioners, physicians assistants, technicians, or other healthcare providers who are involved in taking care of you.

• For Payment. We may use or disclose your PHI to seek or receive payment for services that you receive, including payment from an insurance company or government payor.

HOW WE MAY USE OR DISCLOSE YOUR PROTECTED HEALTH INFORMATION

As permitted by HIPAA, we may use or disclose your PHI from our records (even after your death) without your permission in the following circumstances.

• As Required By Law. We will disclose health information about you when required to do so by federal, state, or local law. For example, we must comply with laws regarding reports of abuse or neglect or domestic violence. We may also share health information to help with product recalls or to report adverse reactions to medications.

• Health Oversight Activities. We may disclose Personal Health Information (PHI) about you for health oversight activities. These activities may include audits, investigations, inspections, and licensure. These activities are necessary for the state and federal government to monitor the healthcare delivery system.

• Individuals Involved in Your Care. We may release PHI to the person you named in your advance directive and to persons involved in your care or the payment for your care that you’ve selected and notified us may receive your PHI.

• Public Health. We may disclose PHI about you for public health activities. These activities may include the reporting of certain diseases, injuries, and disabilities.

• Research. In certain circumstances, and under supervision of a facility’s institutional review board or a privacy board, we may disclose PHI in order to assist medical research.

• To Avert a Serious Threat to Health or Safety. We may use or disclose your PHI when necessary to prevent or lessen a serious threat to you or the health and safety of the public or another person. Any disclosure, however, would only be to someone able to help prevent the threat.

• Decedents. We may use or disclose a deceased patient’s PHI as authorized by federal or state law, including based on the signed authorization of the estate’s representative.

• Lawsuits and Administrative Disputes. We may disclose your PHI in response to a court order, administrative order, or in response to a valid subpoena or discovery request.

• Marketing. We may use or disclose PHI as permitted under HIPAA for certain marketing purposes, but only if we obtain a valid written authorization from you.

• Business Associates. We may use or disclose PHI to our Business Associates as allowed by HIPAA. Business Associates have written agreements with us which contain specific assurances to protect your health information.

• Personal Representatives. We may use or disclose PHI to persons who are authorized by law to make health care decisions for you.

• Affiliates. We may disclose your PHI to our affiliates in connection with your treatment, payment for our services, or other affiliate related activities.

• Other Uses and Disclosures. Other uses and disclosures not described in this Notice will be made only with your written authorization. For example, most uses of psychotherapy notes require an authorization. You have the right to revoke any authorization you have signed.

• Appointment Reminders/Other Information. We may contact you to provide appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you.

• For Specific Government Functions. As permitted by HIPAA, we may disclose PHI to law enforcement, to government benefit programs relating to eligibility and enrollment, and for workers’ compensation, disaster relief, military, and the interest of national security/protective services.

• Respond To Organ and Tissue Donation Requests. We may share health information about you with organ procurement organizations.

• Work With Medical Examiner or Funeral Director. We may share health information with a coroner, medical examiner, or funeral director when an individual dies.

• Workers’ Compensation. We can use or share health information about you for workers’ compensation claims.

• Note: We will comply with applicable state laws that protect certain types of PHI such as substance abuse, mental health, genetics, and HIV/AIDS and we will not share this type of health information except as permitted by such laws, which may require your written permission.

Your Privacy Rights

You have the following rights regarding health information we maintain about you:

• Right to Inspect and Request a Copy. In most cases, you have the right to look at or get an electronic or paper copy of your medical record. You must make the request in writing. You may be charged a reasonable fee for the cost of copying your records.

• Right to Amend. If you feel that there is a mistake or missing information in our record of your PHI, you may ask us to correct or add to the record. Your request must be made in writing, and you must provide a reason that supports your request. We may deny your request under certain circumstances and we will tell you why in writing within 60 days. Any denial will state the reasons for denial and explain your rights to have the request and denial, along with any statement in response you provide, appended to your PHI. You may also have a right to review your denial.

• Right to Know What Health Information We Have Released. You have the right to ask for a list (“an accounting”) of those with whom we’ve shared information. You must request this list in writing and state the period of time this list should cover for a period of no longer than six (6) years. The first list you receive within a twelve (12) month period will be free.

• Right to Request Restrictions. You have the right to ask us to limit how your PHI is used and disclosed. You must make the request in writing and tell us what information you want to limit and to whom the limits apply. For example, you could request that we not disclose to your spouse a blood test you received. We are not required to agree with your request. If we agree, however, we will comply with your request unless the information is needed to provide you with emergency treatment or the information can be disclosed without your authorization.

• Right to Restrict Disclosure to Health Plan. You have the right to restrict disclosure of PHI to a health plan if the disclosure is for purposes of payment or healthcare operations, is not required by law, and the PHI pertains only to a healthcare item or service for which we have been paid in full out of pocket. We are required to agree to this request unless a law requires us to share that information.

• Right to Confidential Communications. You have the right to ask that we communicate with you in a certain way or at a certain place. For example, you may ask us to send information to your work address instead of your home address. You must make your request in writing. You will not have to explain the reason for your request. We will honor all reasonable requests.

• Right to Receive Written Notice. Affected individuals have the right to receive written notice following a breach of their unsecured PHI.

• Right to Receive a Paper Copy of This Notice. You have the right to a paper copy of this Notice at any time. To get a copy of this Notice:

  • Ask one of our Team Members who can provide a copy of this Notice.

• We reserve the right to change our privacy practices and this Notice at any time and to make such changes effective to all PHI that we maintain. A Notice will be available on request.

• Choose Someone to Act for You. If you have given someone durable power of attorney for healthcare or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has the authority and can act for you before we take any action.

HOW TO GET MORE INFORMATION OR SUBMIT A COMPLAINT

If you have any questions about this Notice or would like further information, please contact CarePlus Urgent Care. If you believe we have violated your privacy rights, you may file a written complaint with Urgent Team and/or the Office of Civil Rights. You will not be denied care or retaliated against for filing a complaint.

Office of Civil Rights

U.S. Department of Health & Human Services200 Independence Ave., SWRoom 509F, HHH Building Washington, DC 20201877.696.6775

The U.S. Department of Health & Human ServicesHubert H. Humphrey Building

200 Independence Avenue, S.W.Washington, D.C. 20201Toll Free Call Center: 1-877-696-6775