Click here: HIPAA brochure-REV 01:2020
to download a PDF version:
I. Understand your Medical Record/Information
Each time you visit a NATIVE HEALTH (NH) facility for services, a record of your visit is made. Typically, this record contains your symptoms, examination, test results, diagnosis, treatment, and a plan for future care. This information, often referred to as your medical record, serves as a:
Legal document that describe the care you receive. Understanding what is in your medical record and how the information is used helps you to:
II. Your Medical Record/Information Rights
Although your medical record is the physical property of NH, the information belongs to you. You have the right to:
III. NATIVE HEALTH (NH) Responsibilities
NH is required by law to: • Maintain the privacy of your health information. • Inform you about our privacy practices regarding health information we collect and maintain about you.
NH reserves the right to change its privacy practices and to make the new provisions effective for all protected health information (PHI) it maintains. NH will post any revised Notice of Privacy Practices at public places within its health care facilities and on its web site at www.nativehealthphoenix.org and you may request a copy of the Notice.
NH understands that health information about you is personal and is committed to protecting your health information. NH will not use or disclose your health information without your permission, except as described in this notice and as permitted by the Privacy Act and Native Health Policy and Procedures.
IV. How NH may use and disclose Health Information about you.
The following categories describe how we may use and disclose health information about you.
We Will Use and Disclose Your Health Information to Provide Your Treatment. For example:
Your health care provider(s) may give copies of your health information to others (health care professionals, personal representative, etc.) to assist in your treatment.
We Will Use and Disclose Your Health Information for Payment Purposes. For example:
We Will Use and Disclose Your Health Information for Health Care Operations. For example:
Business Associates. NATIVE HEALTH (NH) provides some healthcare services and related functions through the use of contracts with business associates. For example, NH may have contracts for medical transcription. When these services are contracted, NH may disclose your health information to business associates so that they can perform their jobs. We require our business associates to protect and safeguard your health information in accordance with all applicable Federal laws.
Notification. NH may use or disclose your health information to notify or assist in the notification of a family member; personal representative or other authorized person(s) responsible for your care, unless you notify us that you object.
Communication with Family. All NH health providers may use or disclose your health information to others responsible for your care unless you object. For example, NH may provide your family members, other relatives, close personal friends, or any other person you identify, with health information that is relevant to that person’s involvement with your care or payment for such care.
Adults and Emancipated Minors with Personal Representatives or Legal Guardians. NH shall treat a personal representative or legal guardian of any such individual who has been declared incompetent due to physical or mental incapacity by a court of competent jurisdiction for the purposes of the use and disclosure of PHI as it relates to such personal representation.
Interpreters. In order to provide you proper care and services, NH may use the services of an interpreter. This may require the use or disclosure of your personal health information to the interpreter.
Organ Procurement Organizations. NH may use or disclose your health information to organ procurement organizations or other entities engaged in the procurement, banking, or transplantation of organs for the purpose of facilitating organ, eye, or tissue donation and transplant.
Uses and Disclosures about Decedents. NH may use or disclose health information about decedents to a coroner or medical examiner for the purpose of identifying a deceased person, determining a cause of death, or other duties as authorized by law. NH also may disclose health information to funeral directors consistent with applicable law as necessary to carry out their duties. In addition, NH may disclose decedents where required under the Freedom of Information Act or otherwise required by law.
Treatment Alternatives and Other Health-related Benefits and Services. NH may contact you to provide information about treatment alternatives or other types of health-related benefits and services that may be of interest to you. For example, we may contact you about availability of new treatment or services for diabetes.
Food and Drug Administration. NH may use or disclose your health information to the Food and Drug Administration (FDA) in connection with a FDA-regulated product or activity. For example, we may disclose to the FDA information concerning adverse events involving food, dietary supplements, product defects, or problems, and information needed to track FDA-regulated products or to conduct product recalls, repairs, replacements, or lookbacks (including locating people who have received products that have been recalled or withdrawn), or post marketing surveillance.
Appointment Reminders. NH may contact you with reminder that you have an appointment for medical care at a NH facility or to advise you of a missed appointment.
Workers Compensation. NH may use or disclose your health information for workers compensation purposes as authorized or required by law.
Public Health. NH may use or disclose your health information to public health or other appropriate government authorities as follows:
Correctional Institution. If you are an inmate of a correctional institution, NH may use or disclose to the institution, health information necessary for your health and the health and safety of other individuals such as officers or employees or other inmates.
Law Enforcement. NH may use or disclose your health information for law enforcement activities as authorized by law or in response to a court of competent jurisdiction.
Health Oversight Authorities. NH may use or disclose your health information to health oversight agencies for activities authorized by law. These oversight activities may include: investigations, audits, inspections, and other actions. These are necessary for the government to monitor the health care system, government benefit programs, and entities subject to government regulatory programs and/or civil rights laws for which health information is necessary to determine compliance. NH is required by law to disclose protected health information to the Secretary, HHS, to investigate or determine compliance with the HIPAA privacy standards.
Members of the Military. If you are a member of the military services, NH may use or disclose your health information, if necessary, to the appropriate military command authorities as authorized by law.
Compelling Circumstances. NH may use or disclose your health information in certain other situations involving compelling circumstances affecting the health or safety of an individual. For example, in certain circumstances:
Non Violation of this Notice. NH is not in violation of this Notice or the HIPAA Privacy Rule if any of its employees or its contractors (business associates) disclose protected health information under the following circumstances:
1. Disclosures by Whistleblowers. If a NH employee or contractor (business associate) in good faith believes that NH has engaged in conduct that is unlawful or otherwise violates clinical and professional standards, or that the care or services provided by NH has the potential of endangering one or more patients or members of the workplace or the public, and discloses such information to:
a. A Public Health Authority or Health Oversight Authority authorized by law to investigate or otherwise oversee the relevant conduct or conditions, or the suspected violation, or an appropriate health care accreditation organization for the purpose of reporting the allegation of failure to meet professional standards or misconduct by NH; or
b. An attorney on behalf of the workforce member, or contractor (business associate) or hired by the workforce member or contractor (business associate) for the purpose of determining their legal options regarding the suspected violation.
2. Disclosures by Workforce Member Crime Victims. Under certain circumstances, a NH workforce member (either an employee or contractor) who is a victim of a crime on or off a NH facility’s premises may disclose information about the suspect to law enforcement officials provided that:
a. The information disclosed is about the suspect who committed the criminal act.
b. The information disclosed is limited to identifying and locating the suspect.
Any other uses and disclosures will be made only with your written authorization, which you may later revoke in writing at any time. (Such revocation would not apply where the health information already has been disclosed or used or in circumstances where NH has taken action in reliance on your authorization or the authorization was obtained as a condition of obtaining insurance coverage and the insurer has a legal right to contest a claim under the policy or the policy itself.)
To exercise your rights under this Notice, to ask for more information, or to report a problem contact the NATIVE HEALTH HIPAA Compliance Officer.
If you believe your privacy rights have been violated, you may file a written complaint with the above individual(s) or to the address listed below. There will be no retaliation for filing a complaint.
Region IX – AZ, CA, HI, NV
Regional Manager for Civil Rights
U.S. Department of Health & Human Services
Region IX San Francisco
90 Seventh Street
Federal Building, Suite 5-100
San Francisco, CA 94103
(415) 437-8505 Fax