Health Insurance Portability and Accountability Act (HIPAA)
HIPAA is a set of regulations established by the Federal government to ensure the confidentiality of medical records in verbal, written and computerized forms. Patient privacy is, and always has been, very important to us. Refer to the Notice of Privacy Practices below for more information. Please contact Patient and Guest Services at 307.688.1530 if you have any questions.
NOTICE OF PRIVACY PRACTICES
This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
This privacy notice:
- Describes our practices for the protection of your personal/protected health information (PHI).
- Explains how we may use and disclose health information about you.
- Describes your rights.
- Explains the duties we have regarding the use and disclosure of health information.
- Applies to all of your records generated by the hospital, whether made by hospital personnel or your doctor.
Campbell County Memorial Hospital is required to:
- Maintain privacy of your information;
- Make available to you this notice of legal duties and privacy practices with respect to the information we maintain about you
- Abide by the terms of the notice that is currently in effect.
- Notify you if we are unable to agree to the requested restrictions.
HOW WE MAY USE AND DISCLOSE HEALTH INFORMATION ABOUT YOU
The following covers most, but not exclusively all, of the ways in which your health information will be used and disclosed.
- We will explain what we mean.
- We will try to give examples.
- Each use and disclosure will not be listed.
For Treatment: We will use your health information for treatment.
For example: Information obtained by a nurse, physician or other member of your healthcare team will be recorded in your record and used to determine the course of treatment that should work best for you. Your physician will document in your record his expectations of the members of your healthcare team. Members of your healthcare team will then record the actions they took and their observations. In that way the physician will know how you are responding to treatment.
We will also provide your physician or a subsequent health care provider with copies of various reports that should assist him/her in treating you once you are discharged from this hospital.
For Payment: We will use your health information for payment. You have the right to restrict disclosure to your health plan for treatment paid in full by you out of your own pocket.
For example: A bill may be sent to you or a third party payer. This information on or with the bill may include information that identifies you, as well as your diagnosis, procedures and supplies use.
For Health Care Operations: We will use your health information for regular health care operations.
For example: Members of the medical staff, the risk or quality improvement manager, or members of the quality improvement team may use information in your health record to assess the care and outcomes in your case and others like it. This information will then be used in an effort to continually improve the quality and effectiveness of the healthcare and service we provide.
OTHER DISCLOSURES AND USES
Communication with Family: We may disclose health information relevant to that person’s involvement in your care or payment to:
- a family member
- other relative
- close personal friend
- any other person you identify
Notification: We may use or disclose information about your location and general condition to notify or assist in notifying a family member, personal representative, or another person responsible for your care.
Business Associates: There are some services provided by the hospital by other companies. We may disclose your information to them so that they can perform the job we have asked them to do. For example: Physician services in radiology and certain laboratory tests.
Health Education and Marketing:
- We may contact you to provide appointment reminders.
- We may tell you about possible treatment options.
- We may tell you about possible alternatives.
- We may tell you about health-related benefits or services.
- We will not utilize your PHI for marketing purposes.
Fundraising Activities: We may contact you as part of a fund-raising effort. You have the right to opt out of fundraising activities.
Hospital Directory: Unless you object in writing to Patient Access (or the Admitting Department), we will use your name, location, and religious affiliation in the directory. This information may be provided to members of the clergy. Except for religious affiliation, this information may be provided to others who ask for you by name.
Research: We may use and disclose information about you for research purposes. All research projects are subject to a special approval process. You will almost always be asked for your permission before your information is provided.
As Required By Law: We will disclose information about you when required to do so by federal, state or local law. We will disclose information about victims of abuse, neglect or domestic violence.
To Avoid a Serious Threat to Health or Safety: We may disclose information about you when necessary to prevent a serious threat. Any disclosure, however, would only be to someone able to help prevent the threat.
Organ and Tissue Donation: We may disclose health information to organ procurement organizations for the purpose of tissue donation and transplant.
Military and Veterans: We may release information about you as required by military command authorities.
Workers' Compensation: We may release information as authorized by laws for workers' compensation or similar programs.
Public Health Risks: We may disclose information about you for public health activities such as preventing or controlling disease, injury or disability.
Health Oversight Activities: We may disclose information to a health oversight agency for activities authorized by law.
Coroners, Medical Examiners and Funeral Directors: We may release information to a coroner, medical examiner or funeral directors.
National Security and Intelligence Activities: We may release information about you to authorized federal officials for activities authorized by law.
Protective Services for the President and others: We may disclose information about you to authorized federal officials.
Correctional Institution/Law Enforcement: If you are an inmate of a correctional institution or under the custody of law enforcement, we may disclose information to them. We may disclose information for law enforcement purposes as required by law.
Lawsuits and disputes:If you are involved in a lawsuit or a dispute, we may disclose medical information about you in response to a court or administrative order. We may also disclose medical information about you in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute, but only if efforts have been made to tell you about the request or to obtain an order protecting the information requested.
YOUR RIGHTS REGARDING HEALTH INFORMATION ABOUT YOU
Your health records are the physical property of the hospital. The information in the record belongs to you. You have the following rights regarding information we maintain about you:
- Request a restriction on certain uses and disclosures of your information as provided by 45 CFR 164.522.
- Obtain a paper or electronic copy of the notice of information practices upon request. You may obtain a copy of this notice at our website, WWW.CCMH.NET.
- Inspect and copy, and receive in paper or electronic format, your health record as provided for in 45 CFR 164.524.
- Amend your health record as provided in 45 CFR 164.528.
- Obtain an accounting of disclosures of your health information as provided in 45 CFR 164.528.
- Request communications of your health information by alternative means or at alternative locations.
- Revoke your authorization to use or disclose health information except to the extent that action has already been taken.
You will be notified of a breach of unsecured PHI in the event you are affected.
FOR MORE INFORMATION OR TO REPORT A PROBLEM
Please contact the Privacy Officer at 307.688.1322, Patient and Guest Relations or Consumer Advocacy at 307.688.1530 if you have any questions. If you believe your privacy rights have been violated:
- You may file a complaint with the hospital. To file a complaint with the hospital, contact the Privacy Officer at 307.688.1322 or Consumer Advocacy Office at 307.688.1530. All complaints must be in writing. You will not be penalized for filing a complaint.
You may file a complaint with the Secretary of the Department of Health and Human Services.
Office of Civil Rights
200 Independence Avenue, SW
Washington, DC 20201
Toll Free 1.877.696.6775
OTHER USES OF HEALTH INFORMATION
Other uses and disclosures of information not covered by this notice or the law will be made only with your written authorization.
Use or disclosure of your psychotherapy notes unless required by law or obtain your written signature.
We will not sell your PHI.
CHANGES TO THIS NOTICE
- We reserve the right to change this notice.
- We reserve the right to make the revised notice effective for information we already have about you or any information we receive in the future.
- A copy of the current notice will be posted in the hospital.
- On the first page of this notice, in the top right-hand corner, will be the effective date.
- Each time you register at the hospital for treatment we will offer you a copy of the current notice that is in effect.
Business Associate: A person or organization that performs an activity on behalf of the hospital, but is not part of the hospital’s workforce.
Disclosure: The release, transfer, and provision of access or sharing of information outside the hospital holding the information.
Health Care [or healthcare]: Care, services, or supplies related to the health of an individual, including but not limited to the following: Preventive, diagnostic, therapeutic, rehabilitative, maintenance, or end-of-life, and counseling, service, assessment, or procedure with respect to the physical or mental condition, or functional status of an individual. Sale or dispensing of a drug, device, equipment, or other item in accordance with a prescription.
Health Care Providers: A provider of services or any other person or organization who furnishes, bills or is paid for health care in the normal course of business.
Healthcare Operations: Activities of the hospital to the extent that the activities are related to the operations of the hospital.
Health Information: Any information, whether oral or recorded in any form that is created or received by the hospital or related facilities. This information relates to the past, present, or future physical or mental health or condition of an individual; the provision of health care to an individual; or the past, present, or future payment for the provision of health care to an individual.
Health Oversight Agency: An agency that is authorized by law to oversee the health care system (whether public or private) or government programs in which health information is necessary to determine eligibility or compliance, or to enforce civil rights laws for which health information is relevant.
Public Health Authority: An agency that has the authority for public health matters as part of its official mandate.
Personal health information (PHI): Also referred to as
protected health information, generally refers to demographic information, medical history, test and laboratory results, insurance information and other data that is collected by a health care professional to identify an individual and determine appropriate care.
Research: A systematic investigation designed to develop or contribute to generalizable knowledge.
Treatment: The provision, coordination, or management of health care and related services by one or more health care providers.
Updated: December 2013