MACDONALD TRAINING CENTER, INC.
NOTICE OF PRIVACY PRACTICES FOR PROTECTED HEALTH INFORMATION
Revised as of January 2016
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
If you have any questions or wish to receive additional information about the matters covered by this Notice of Privacy Practices (“Notice”), please contact the Privacy Officer for MACDONALD TRAINING CENTER, INC. (“MTC”), Elsje Watson at 5420 W. Cypress St., Tampa, FL 33607 or call: (813) 870-1300 Ext. 275.
This Notice is provided to you in compliance with the requirements of the Health Insurance Portability and Accountability Act of 1996, the Health Information Technology for Economic and Clinical Health Act, Title XIII of the American Recovery and Reinvestment Act of 2009 (the “HITECH Act”) and associated regulations, as may be amended (collectively referred to as “HIPAA”) describing MTC’s legal duties and privacy practices with respect to your Protected Health Information (“PHI”). MTC is required to abide by the terms of this Notice currently in effect, and may need to revise the Notice from time to time. Any required revisions of this Notice will be effective for all PHI that MTC maintains. A current copy of the Notice will be posted in each office and you may request a paper, or electronic, copy of it.
PHI consists of all individually identifiable information which is created or received by MTC and which relates to your past, present or future physical or mental health condition, the provision of health care to you, or the past, present or future payment for health care provided to you.
USE AND DISCLOSURE OF PHI FOR WHICH YOUR CONSENT
OR AUTHORIZATION IS NOT REQUIRED
HIPAA permits MTC to use or disclose your PHI in certain circumstances, which are described below, without your authorization. However, Florida law may not permit the same disclosures. MTC will comply with whichever law is stricter.
1. Treatment: MTC may use and disclose your PHI to provide, coordinate or manage your health care related services, including consulting with health care providers about your health care or referring you to a health care provider for treatment. For example, MTC may discuss your health information with your dentist to schedule appointment times and discuss the details of your treatment. MTC may also discuss your services with your waiver support coordinator to ensure that you are receiving the benefits necessary to meet your needs.
2. Payment: MTC may use and disclose your PHI, as needed, to obtain payment from Medicaid for services MTC provides to you through the Medicaid Developmental Disabilities Waiver for home and community program. For example, MTC may disclose and receive information about you from Florida Agency for Health Care Administration (“AHCA”) and the Agency for Persons with Disabilities (“APD”) regarding the type of services you receive.
3. Health Care Operations: MTC may use or disclose your PHI in order to carry out its administrative functions. These activities include, but are not limited to, quality assessment and improvement activities, reviewing the competence or qualification of health care professionals, business planning and development, business management and general administrative activities. For example, MTC may disclose your PHI to licensing or accrediting agencies reviewing the types of services provided.
4. Required by Law: MTC may use or disclose your PHI to the extent that such use or disclosure is required by law.
5. Public Health: MTC may disclose your PHI to a public health authority, employer or appropriate governmental authority authorized to receive such information for the purpose of: (a) preventing or controlling disease, injury or disability; reporting disease or injury; conducting public health surveillance, public health investigations and public health interventions; or at the direction of a public health authority, to an official of a foreign government agency in collaboration with a public health authority; or reporting child abuse or neglect;
(b) activities related to the quality, safety or effectiveness or activities or products regulated by the Food and Drug Administration; (c) notifying a person who may have been exposed to a communicable disease or may otherwise be at risk of spreading a disease or condition.
6. Abuse, Neglect or Domestic Violence: MTC may disclose your PHI to a government authority authorized to receive reports of abuse, neglect or domestic violence if it reasonably believes that you are a victim of abuse, neglect or domestic violence. Any such disclosure will be made: 1) to the extent it is required by law; 2) to the extent that the disclosure is authorized by statute or regulation and MTC believes the disclosure is necessary to prevent serious harm to you or other potential victims; or 3) if you agree to the disclosure.
7. Health Oversight Activities: MTC may disclose your PHI to a health oversight agency for any oversight activities authorized by law, including audits; investigations; inspections; licensure or disciplinary actions; civil, criminal or administrative actions or proceedings; or other activities necessary for the oversight of the health care system, government benefit programs, compliance with government regulatory program standards or applicable laws.
8. Judicial and Administrative Proceedings: MTC may disclose your PHI in the course of any judicial or administrative proceeding in response to an order of a court or administrative tribunal, or in response to a subpoena, discovery request, or other lawful process upon receipt of “satisfactory assurance” that you have received notice of the request.
9. Law Enforcement Purposes: MTC may disclose limited PHI about you for law enforcement purposes to a law enforcement official: (a) in compliance with a court order, a court-ordered warrant, a subpoena or summons issued by a judicial officer or an administrative request; (b) in response to a request for information for the purposes of identifying or locating a suspect, fugitive, material witness or missing person; (c) in response to a request about an individual that is suspected to be a victim of a crime, if, under limited circumstances, MTC is not able to obtain your consent; (d) if the information relates to a death MTC believes may have resulted from criminal conduct; (e) if the information constitutes evidence of criminal conduct that occurred on the premises of MTC ; or (f) in certain emergency circumstances, to alert law enforcement of the commission and nature of a crime, the location and victims of the crime and the identity, or description and location of the perpetrator of the crime.
10. Coroners, Medical Examiners and Funeral Directors: MTC may disclose your PHI to a coroner or medical examiner for the purpose of identification, determining a cause of death or other duties authorized by law. MTC may disclose your PHI to a funeral director, consistent with all applicable laws, in order to allow the funeral director to carry out his or her duties.
11. Research:MTCmayuseordiscloseyourPHIforresearchpurposes,providedthananinstitutionalreview board authorized by law or a privacy board waives the authorization requirement and provided that the researcher makes certain representations regarding the use and protection of the PHI.
12. Serious Threat to Health or Safety: MTC may disclose your PHI, in a manner which is consistent with applicable laws and ethical standards, if the disclosure is necessary to prevent or lessen a serious threat to health or safety of a person or the public, or the information is necessary to apprehend an individual.
13. Specialized Government Functions: MTC may also disclose your PHI, (a) If you are a member of the United States or foreign Armed Forces, for activities that are deemed necessary by appropriate military command authorities to assure the proper execution of a military mission; (b) to authorized federal officials for the conduct of lawful intelligence, counter-intelligence and other national security activities authorized by law; (c) to authorized federal officials for the provision of protective services to the President, foreign heads of state, or other people authorized by law and to conduct investigations authorized by law; or (d) to a correctional institution or a law enforcement official having lawful custody of you under certain circumstances.
14. Workers’ Compensation: MTC may disclose your PHI as authorized by, and in compliance with, laws relating to workers’ compensation and other similar programs established by law.
USES AND DISCLOSURES TO WHICH YOU MAY OBJECT
15. If you do not object to the following uses or disclosures of your PHI, MTC may: 1) disclose to a family member, other relative, a close personal friend, or other person identified by you the information relevant to their involvement in your care or payment related to your care; 2) notify others, or assist in the notification, of your location, general condition, or death; or 3) disclose your PHI to assist in disaster relief efforts.
OTHER USES AND DISCLOSURES OF PHI
16. Any use or disclosure of your PHI that is not listed herein will be made only with your written authorization. You have the right to revoke such authorization at any time, provided that the revocation is in writing, except to the extent that: 1) MTC has taken action in reliance on the prior authorization; or 2) If the authorization was obtained as a condition of obtaining insurance coverage, other law provides the insurer with the right to contest a claim under the policy or the policy itself.
YOUR RIGHTS REGARDING YOUR PHI
17. Restriction of Use and Disclosure: You have the right to request that MTC restrict the PHI it uses and discloses in carrying out treatment, payment and health care operations. You also have the right to request that MTC restrict the PHI it discloses to a family member, other relative or any other person identified by you, which is relevant to such person’s involvement in your treatment or payment for your treatment. By law, MTC is not obligated to agree to any restriction that you request. If MTC agrees to a restriction, however, it may only disclose your PHI in accordance with that restriction, unless the information is needed to provide emergency health care to you. If you wish to request a restriction on the use and disclosure of your PHI, please send a written request to the Privacy Officer which specifically sets forth: 1) that you are requesting a restriction on the use or the disclosure of your PHI; 2) what PHI you wish to restrict; and 3) to whom you wish the restrictions to apply (e.g., your spouse). MTC will not ask why you are requesting the restriction. The Privacy Officer will review your request and notify you whether or not MTC will agree to your requested restriction. You also have the right to request to restrict disclosure of your PHI to a health plan, if the disclosure is for payment or health care operations and the disclosure pertains to a health care item or service for which you have paid out of pocket in full.
18. AuthorizationRequired:MostusesanddisclosuresofPHIformarketingandthesaleofPHIrequireyour authorization. In addition, disclosure of psychotherapy notes is prohibited without your authorization, except as allowed by law.
19. Fundraising: MTC may contact you for purposes of fundraising to support its programs. You have the option to opt-out of this type of communication.
20. Confidential Communications: You have the right to receive confidential communications of your PHI. You may request that you receive communications of your PHI from MTC in alternative means or at alternative locations. MTC will accommodate all reasonable requests, but certain conditions may be imposed.
To request that MTC make communications of your PHI by alternative means or at alternative locations, please send a written request to the Privacy Officer setting forth the alternative means by which you wish to receive communications or the alternative location at which you with to receive such communications. MTC will not ask why you are making such a request.
21. Access to PHI: You have the right to inspect and obtain a copy of your PHI maintained by MTC. Under HIPAA, you do not have the right to inspect or copy information compiled in reasonable anticipation of, or for use in, a civil, criminal or administrative action or proceeding, or information that MTC is otherwise prohibited by law from disclosing.
If you wish to inspect or obtain a copy of your PHI, please send a written request to the Privacy Officer. If you request a copy of your PHI, MTC may charge a fee for the cost of copying and mailing the information. You may also request that a copy of your PHI be transmitted to you electronically.
HIPAA permits MTC to deny your request to inspect or obtain a copy of your PHI for certain limited reasons. If access is denied, you may be entitled to a review of that denial. If you receive an access denial and want a review, please contact the Privacy Officer. The Privacy Officer will designate a licensed health care professional to review your request. This reviewing health care professional will not have participated in the original decision to deny your request. MTC will comply with the decision of the reviewing health care professional.
22. Amending PHI: You have the right to request that MTC amend your PHI. To request that an amendment be made to your PHI, please send a written request to the Privacy Officer. Your written request must provide a reason that supports the request amendment. MTC may deny your request if it does not contain a reason that supports the requested amendment. Additionally, MTC may deny your request to have your PHI amended if it determines that: 1) the information was not created by MTC and amendment may be made elsewhere; 2) the information is not part of a medical or billing record; 3) the information is not available for your inspection; or 4) the information is accurate and complete.
23. Notification of Breach: MTC will notify you following a breach of your PHI as required by law.
24. Accounting of Disclosure of Your PHI: You have the right to request a listing of certain disclosure of your PHI made by MTC during the period of up to six (6) years prior to the date on which you make your request. Any accounting you request will not include: 1) disclosures made to carry out treatment, payment or health care operations; 2) disclosures made to you; 3) disclosures made pursuant to an authorization given by you; 4) disclosures made to other people involved in your care or made for notification purposes; 5) disclosures made for national security or intelligence purposes; 6) disclosure made to correctional institutions or law enforcement officials; or 7) disclosures made prior to April 14, 2003. The right to receive an accounting is subject to certain other exceptions, restrictions and limitations set forth in applicable statutes and regulations.
To request an accounting of the disclosures of your PHI, please send a written request to the Privacy Officer. Your written request must set forth the period for which you wish to receive an accounting. MTC will provide one free accounting during each twelve (12) month period. If you request additional accountings during the same twelve (12) month period, you may be charged for all costs incurred in preparing and providing that accounting. MTC will inform you of the fee for each accounting in advance and will allow you to modify or withdraw your request in order to reduce or avoid the fee.
25. Obtaining a Copy of this Notice: You have the right to request and receive a paper or electronic copy of this Notice at any time.
COMPLAINTS
26. If you believe that your privacy rights have been violated, you may file a complaint with MTC or with the Secretary of Health and Human Services. To file a complaint with MTC, please contact the Privacy Officer at the address listed on page 1 of this notice. All complaints must be submitted in writing. MTC WILL NOT RETALIATE AGAINST YOU FOR FILING A COMPLAINT.
