Our office is dedicated to protecting the privacy rights of our patients and the confidential information entrusted to us. It is a requirement of this practice that every employee receive appropriate training and is dedicated to the principal concept that your health information shall never be compromised. We may, from time to time, amend our privacy policies and practices but will always inform you of any changes that might affect our obligations and your rights.
PROTECTING YOUR HEALTHCARE INFORMATION
We use and disclose the information we collect from you only as allowed by the Health Insurance Portability and Accountability Act (HIPAA) and the state of Iowa. This includes issues relating to your treatment, payment, and our healthcare operations. Your personal health information will never be otherwise given or disclosed to anyone — even family members — without your consent or written authorization. You, of course, may give written authorization for us to disclose your information to anyone you choose, for any purpose.
COLLECTING PROTECTED HEALTHCARE INFORMATION (PHI)
We will only request personal information needed to provide our standard of quality health care, implement payment activities, conduct normal health practice operations, and comply with the law. This may include your name, address, telephone number(s), social security number, employment data, medical history, health records, etc. While most of the information will be collected from you, we may obtain information from third parties if it is deemed necessary. Regardless of the source, your personal information will always be protected to the full extent of the law.
DISCLOSURE OF YOUR PROTECTED HEALTHCARE INFORMATION
As stated above, we may disclose information as required by law. We are obligated to provide information to law enforcement and government officials under certain circumstances. We will not use our information for marketing or fundraising purposes without your written consent. We may use and/or disclose your health information to communicate reminders about your appointments, including voicemail messages, answering machines, and postcards, unless you direct us otherwise. We will never use, disclose, sell, or otherwise allow access to your personal, protected information in exchange for or receipt of financial remuneration.
Any breach in the protection of your personal health information, including unauthorized acquisition, access, use, or disclosure, will be fully investigated, addressed, and mitigated as established by the HIPAA Privacy Breach Notification Rule. You have a right to and will be provided all information relating to any breach involving your personal PHI.
YOUR RIGHTS AS OUR PATIENT
You have a right to request copies of your healthcare information, to request copies in a variety of formats, and to request a list of instances in which we, or our business associates, have disclosed your protected information for uses other than stated above. All such requests must be in writing. We may charge for your copies in an amount allowed by law. If you believe your rights have been violated, we urge you to notify us immediately. You can also notify the U.S. Department of Health and Human Services.
An expanded and complete copy of our Statement of Privacy Practices is available for your review.