IV. YOUR RIGHTS REGARDING MEDICAL INFORMATION ABOUT YOU.
Federal and state laws provide you with certain rights regarding the medical information we have about you. The following is a summary of those rights.
A. Right to Inspect and Copy. Under most circumstances, you have the right to inspect and/or copy your medical information that we have in our possession, which generally includes your medical and billing records. To inspect or copy your medical information, you must submit your request to do so in writing to the Practice’s HIPAA Officer at the address listed in Section VI below. If you request a copy of your information, we may charge a fee for the costs of copying, mailing, or certain supplies associated with your request. The fee we may charge will be the amount allowed by state law. If your requested medical information is maintained in an electronic format (e.g., as part of an electronic medical record, electronic billing record, or other group of records maintained by the Practice that is used to make decisions about you) and you request an electronic copy of this information, then we will provide you with the requested medical information in the electronic form and format requested, if it is readily producible in that form and format. If it is not readily producible in the requested electronic form and format, we will provide access in a readable electronic form and format as agreed to by the Practice and you. In certain very limited circumstances allowed by law, we may deny your request to review or copy your medical information. We will give you any such denial in writing. If you are denied access to medical information, you may request that the denial be reviewed. Another licensed health care professional chosen by the Practice will review your request and the denial. The person conducting the review will not be the person who denied your request. We will abide by the outcome of the review.
B. Right to Amend. If you feel the medical information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by the Practice. To request an amendment, your request must be in writing and submitted to the HIPAA Officer at the address listed in Section VI below. In your request, you must provide a reason as to why you want this amendment. If we accept your request, we will notify you of that in writing. We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that (i) was not created by us (unless you provide a reasonable basis for asserting that the person or organization that created the information is no longer available to act on the requested amendment), (ii) is not part of the information kept by the Practice, (iii) is not part of the information which you would be permitted to inspect and copy, or (iv) is accurate and complete. If we deny your request, we will notify you of that denial in writing.
C. Right to an Accounting of Disclosures. You have the right to request an "accounting of disclosures" of your medical information. This is a list of the disclosures we have made for up to six years prior to the date of your request of your medical information, but does not include disclosures for Treatment, Payment, or Health Care Operations (as described in Sections II A, B, and C of this Notice) or disclosures made pursuant to your specific authorization (as described in Section III of this Notice), or certain other disclosures.
If we make disclosures through an electronic health records (EHR) system, you may have an additional right to an accounting of disclosures for Treatment, Payment, and Health Care Operations. Please contact the Practice’s HIPAA Officer at the address set forth in Section VI below for more information regarding whether we have implemented an EHR and the effective date, if any, of any additional right to an accounting of disclosures made through an EHR for the purposes of Treatment, Payment, or Health Care Operations.
To request a list of accounting, you must submit your request in writing to the Practice’s HIPAA Officer at the address set forth in Section VI below.
Your request must state a time period, which may not be longer than six years (or longer than three years
for Treatment, Payment, and Health Care Operations disclosures made through an EHR, if applicable) and may not include dates before April 14, 2003. Your request should indicate in what form you want the list (for example, on
paper or electronically). The first list you request within a twelve-month period will be free. For additional lists, we
may charge you a reasonable fee for the costs of providing the list. We will notify you of the cost involved and you
may choose to withdraw or modify your request at that time before any costs are incurred.
D. Right to Request Restrictions. You have the right to request a restriction or limitation on the
medical information we use or disclose about you for treatment, payment, or health care operations. You also have
the right to request a restriction or limitation on the medical information we disclose about you to someone who is
involved in your care or the payment for your care, like a family member or friend.
Except as specifically described below in this Notice, we are not required to agree to your request for a
restriction or limitation. If we do agree, we will comply with your request unless the information is needed to
provide emergency treatment. In addition, there are certain situations where we won’t be able to agree to your
request, such as when we are required by law to use or disclose your medical information. To request restrictions,
you must make your request in writing to the Practice’s HIPAA Officer at the address listed in Section VI of this
Notice below. In your request, you must specifically tell us what information you want to limit, whether you want us
to limit our use, disclosure, or both, and to whom you want the limits to apply.
As stated above, in most instances we do not have to agree to your request for restrictions on disclosures
that are otherwise allowed. However, if you pay or another person (other than a health plan) pays on your behalf for
an item or service in full, out of pocket, and you request that we not disclose the medical information relating solely
to that item or service to a health plan for the purposes of payment or health care operations, then we will be
obligated to abide by that request for restriction unless the disclosure is otherwise required by law. You should be
aware that such restrictions may have unintended consequences, particularly if other providers need to know that
information (such as a pharmacy filling a prescription). It will be your obligation to notify any such other providers
of this restriction. Additionally, such a restriction may impact your health plan’s decision to pay for related care that
you may not want to pay for out of pocket (and which would not be subject to the restriction).
E. Right to Request Confidential Communications. You have the right to request that we
communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that
we only contact you at home, not at work or, conversely, only at work and not at home. To request such confidential
communications, you must make your request in writing to the Practice’s HIPAA Officer at the address listed in
Section VI below.
We will not ask the reason for your request, and we will use our best efforts to accommodate all reasonable
requests, but there are some requests with which we will not be able comply. Your request must specify how and
where you wish to be contacted.
F. Right to a Paper Copy of This Notice. You have the right to a paper copy of this Notice. You
may ask us to give you a copy of this Notice at any time. To obtain a copy of this Notice, you must make your
request in writing to the Practice’s HIPAA Officer at the address set forth in Section VI below.
G. Right to Breach Notification. In certain instances, we may be obligated to notify you (and
potentially other parties) if we become aware that your medical information has been improperly disclosed or
otherwise subject to a “breach” as defined in and/or required by HIPAA and applicable state law.