Legal

Notice of Privacy Practices.


THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This is a summary of how we may use and disclose your protected health information and your rights and choices when it comes to your information. Index Health, Inc. and Ziemba Medical, P.C. (collectively, the “Company”) are committed to follow the following privacy practices with respect to your protected health information ("PHI").

We understand that medical information about you and your health is personal. We are committed to protecting medical information about you. We create a record of the care and services you receive at the office. We need this record to provide you with quality care and to comply with certain legal requirements. This notice applies to all of the records of your care generated by the office, whether made by office personnel or your personal doctor. Your personal doctor may have different policies or notices regarding the doctor's use and disclosure of your medical information created in the doctor's office or clinic.

This notice will tell you about the ways in which we may use and disclose medical information about you. We also describe your rights and certain obligations we have regarding the use and disclosure of medical information.

We are required by law to:

  • Make sure that medical information that identifies you is kept private (with certain exceptions);
  • Give you this notice of our legal duties and privacy practices with respect to medical information about you; and
  • Follow the terms of the notice that is currently in effect.

How We May Use and Disclose Medical Information about You

The following categories describe different ways that we use and disclose medical information. For each category of uses or disclosures we will explain what we mean and try to give some examples. Not every use or disclosure in a category will be listed. However, all of the ways we are permitted to use and disclose information will fall within one of the categories.


At Your Request

We may disclose information when requested by you. This disclosure requires a written consent.


For Treatment

We may use medical information about you to provide you with medical treatment or services. We may disclose medical information about you to doctors, nurses, technicians, health care students, or other office personnel who are involved in taking care of you at the office. For example, a doctor treating you for a broken leg may need to know if you have diabetes because diabetes may slow the healing process. In addition, the doctor may need to tell the dietitian if you have diabetes so that we can arrange for appropriate meals. The office also may share medical information about you in order to coordinate the different things you need, such as prescriptions, lab work and X-rays. We also may disclose medical information about you to people outside the center who may be involved in your medical care after you leave the office, such as skilled nursing facilities, home health agencies, and physicians or other practitioners. For example, we may give your physician access to your health information to assist your physician in treating you.


For Payment

We may use and disclose medical information about you so that the treatment and services you receive at the office may be billed to and payment may be collected from you, an insurance company or a third party. For example, we may need to give your health plan information about surgery you received at the office so your health plan will pay us or reimburse you for the surgery. We may also tell your health plan about a treatment you are going to receive to obtain prior approval or to determine whether your plan will cover the treatment. We may also provide basic information about you and your health plan, insurance company or other source of payment to practitioners outside the office who are involved in your care, to assist them in obtaining payment for services they provide to you.


For Healthcare Operations

We may use and disclose medical information about you for health care operations. These uses and disclosures are necessary to run the office and make sure that all of our patients receive quality care. For example, we may use medical information to review our treatment and services and to evaluate the performance of our staff in caring for you. We may also combine medical information about many office patients to decide what additional services the office should offer, what services are not needed, and whether certain new treatments are effective. We may also disclose information to doctors, nurses, technicians, medical students, and other office personnel for review and learning purposes. We may also combine the medical information we have with medical information from other offices to compare how we are doing and see where we can make improvements in the care and services we offer. We may remove information that identifies you from this set of medical information so others may use it to study health care and health care delivery without learning who the specific patients are.


Appointment Reminders

We may use and disclose medical information to contact you as a reminder that you have an appointment for treatment or medical care at the office.


Treatment Alternatives

We may use and disclose medical information to tell you about or recommend possible treatment options or alternatives that may be of interest to you.


Health-Related Products and Services

We may use and disclose medical information to tell you about our healthcare-related products or services that may be of interest to you.


Our Business Associates

We may use and disclose your PHI to outside persons or entities that perform services on our behalf, such as auditing, legal, or transcription (Business Associates). The law requires our business associates and their subcontractors to protect your PHI in the same way we do. We also contractually require these parties to use and disclose your PHI only as permitted and to appropriately safeguard your PHI.


Public Health and Safety Activities

For example, we may share your PHI to:

  • report injuries, births, and deaths;
  • prevent disease;
  • report adverse reactions to medications or medical device product defects;
  • report suspected child neglect or abuse or domestic violence; or
  • avert a serious threat to public health or safety.


Responding to Legal Actions

For example, we may share your PHI to respond to:

  • a court or administrative order or subpoena;
  • discovery request; or
  • another lawful process.


Workers' Compensation, Law Enforcement, or Other Government Requests

For example, we may use and disclose your PHI for:

  • workers' compensation claims;
  • health oversight activities by federal or state agencies;
  • law enforcement purposes or with a law enforcement official; or
  • specialized government functions, such as military and veterans' activities, national security and intelligence, presidential protective services, or medical suitability.


Your Rights

When it comes to your health information, you have certain rights. This section explains your rights and some of our responsibilities to help you.
You have the right to:

  • Inspect and Obtain a Copy of Your PHI. You have the right to see or obtain an electronic or paper copy of the PHI that we maintain about you (right to request access). Some clarifications about your access rights:
  • we may charge a reasonable, cost-based fee for the costs of copying, mailing, or other supplies associated with your request;
  • if you request a copy of your PHI, we will generally decide to provide or deny access within 30 days; and
  • we may deny your request for access in certain limited circumstances, however, if we deny your access request, we will provide a written denial with the basis for our decision and explain your rights to appeal or file a complaint.
  • Make Amendments. You may ask us to correct or amend PHI that we maintain about you that you think is incorrect or inaccurate. For these requests:
  • we will generally decide to grant or deny your request within 60 days. If we cannot act within 60 days, we will give you a reason for the delay in writing and include when you can expect us to complete our decision, which will be no longer than an additional 30 days.
  • Request Additional Restrictions. You have the right to ask us to limit what we use or share about your PHI (right to request restrictions). You can contact us and request us not to use or share certain PHI for treatment, payment, or operations or with certain persons involved in your care. For these requests:
  • we are not required to agree;
  • we may say "no" if it would affect your care; but
  • we will agree not to disclose information to a health plan for purposes of payment or health care operations if the requested restriction concerns a health care item or service for which you or another person, other than the health plan, paid in full out-of-pocket, unless it is otherwise required by law.
  • Request an Accounting of Disclosures. You have the right to request an accounting of certain PHI disclosures that we have made. For these requests:
  • we will include all the disclosures except for those about treatment, payment, and health care operations, and certain other disclosures, such as any you asked us to make.
  • Choose Someone to Act for You.  If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
  • We will make sure the person has this authority and can act for you before we take any action.
  • Make Complaints. You have the right to complain if you feel we have violated your rights. We will not retaliate against you for filing a complaint. You may either file a complaint:
  • Directly with us by contacting privacyofficer@indexclinic.com.  All complaints must be submitted in writing; or with The Office for Civil Rights at the US Department of Health and Human Services. Send a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints.

NOTICE OF PRIVACY PRACTICES ACKNOWLEDGEMENT OF RECEIPT

By signing this form, you acknowledge receipt of the Notice of Privacy Practices. Our Notice of Privacy Practices provides information about how we may use and disclose your protected health information. We encourage you to read it in full.

Our Notice of Privacy Practices is subject to change. If we change our notice, you may obtain a copy of the revised notice by contacting our office.

If you have any questions about our Notice of Privacy Practices, please contact the practice administrator.

,