Medical review, legal and auditing functions, including compliance programs, business planning and development, business management, and general administrative activities;
Persons involved in your care: We may disclose protected health information directly relevant to your care or payment related to your care to a family member, other relatives, or close personal friend, or any other person you identify. We may also, in general, use or disclose your protected health information to tell, or assist in telling (including identifying or finding) your personal representative, or another person responsible for your care, of your location, general condition or death. You can tell us, before such uses or disclosures, that they are or are not acceptable to you.
If you are not present or could not tell us whether such uses or disclosures are okay, we can, in the exercise of our professional judgment, decide whether such uses or disclosures are in your best interests and directly relevant to the person’s involvement with your health care. We may also use or disclose your protected health information for disaster relief purposes.
Organization directories: Unless you tell us not to, we may use your name, your room number, your general condition (without specific medical information) and your religious affiliation, to maintain an organization directory. We may disclose this directory information to members of the clergy and (except for religious affiliation) to individuals who ask for you by name. You have the right to opt out if you do not want your information disclosed for directory purposes. Notify us in writing of your decision to opt out and we will honor your request.
Required by law: We will use or disclose your protected health information if our use or disclosure is required by and is limited to the relevant requirements of law. There are many Massachusetts and other state and federal laws that may require the use or disclosure of protected health information. For example, Massachusetts law requires us to report known or suspected abuse or neglect to the Department of Public Health.
National and other priority use and disclosure: When required or permitted by law, we may use or disclose protected health information about you without your permission for some activities that are recognized as national priorities. In other words, the government says that sometimes it is so important to disclose protected health information that it is okay to disclose the information without your permission, when we are permitted or required to do so by law. Here are descriptions of some national priority activities with respect to which disclosures without your authorization may be recognized by law: threat to health or safety; public health activities; national security or intelligence; abuse, neglect or domestic violence; health oversight activities; correctional institutions; organ and tissue donation; United States Food and Drug Administration adverse events and oversight; court proceedings and law enforcement; coroners, medical examiner, and funeral directors; workers’ compensation; and certain government functions, such as military and veterans’ activities and national security and intelligence activities.
Authorization: Other than the uses and disclosures described in this Notice and may otherwise be permitted or required by law, we will not use or disclose your protected health information without your, or your personal representative’s, written and dated authorization. Sometimes we may want to use or disclose your protected health information and we may ask – but not require – that you sign an authorization. We will give you a copy of your signed authorization. Sometimes you may ask us to disclose protected health information and we will ask you that you first sign an authorization.
If you sign an authorization permitting us to use or disclose your protected health information, you may cancel your authorization in writing (except in very limited circumstances related to obtaining insurance coverage). If you want to cancel your you should tell us in writing that you revoke your authorization or you should fill out an Authorization Revocation Form, which you can get from our Medical Records Manager. If you cancel your authorization, we will follow your instructions, except to the extent that we have already acted in reliance upon your authorization.
Because we don’t do all of our health care activities and functions by ourselves, we need help from our business associates who are not members of our workforce. In general, we are allowed to share your protected health information with our business associates, so long as we get satisfactory assurances from them in writing that they will safeguard the information. We don’t need your authorization to share your information with our business associates.
We may also give you appointment reminders or information about treatment alternatives or other health-related benefits and services that may be of interest to you, without your authorization.
Special Uses and Disclosures Requiring Authorization:
In general, Massachusetts or federal laws require that we obtain your written authorization before using or disclosing your information about genetic testing or genetic test results, HIV testing or test results, drug, alcohol and other substance abuse rehabilitation treatment programs, treatment for venereal or other sexually transmitted diseases (except legally required disclosures to public health officials), certain information that is legally privileged, psychotherapy notes (except sharing with your therapist), marketing and the sale of protected health information.
II. You have these rights with respect to your protected health information
A right to a copy of this Notice: You have a right to have a paper copy of our Notice of Privacy Practices at any time. In addition, a copy of this Notice is posted in our common area and on our website.
A right of access to inspect and copy your protected health information: You have the right to see, review and get a copy of your protected health information that we keep in certain groups of records. If you want to see or get a copy of your protected health information, ask us or write to us, or fill out our Access Request Form available from our Medical Records Manager. If you want a copy of your information, we may charge you a reasonable fee to cover the costs of the copying. If your medical information is maintained in an electronic health record, you also have the right to request that an electronic copy of your record be sent to you or to another individual or entity. We may charge you a reasonable cost based fee limited to the labor costs associated with transmitting the electronic health record. We may be able to provide you with a summary or explanation of the information. Ask our Medical Records Manager if you want to know more about these services and any possible additional fees.
A right to ask us to amend your protected health information: You have the right to ask us to amend your protected health information that we keep in certain groups of records. If you believe that our information is either inaccurate or incomplete, we may amend the information (if we agree with you) and tell others who have copies of the inaccurate or incomplete information about the amendment. If you want us to amend your information, ask us or fill out our Amendment Request Form available from our Medical Records Manager, and explain why you want us to amend your information. If we are unable, we will tell you why in writing. You can tell us why you disagree, and we will share your disagreement whenever we disclose the information.
A right to an accounting of certain disclosures: You have the right to an accounting (which means a detailed listing) of certain disclosures that we made for the previous six (6) years. If you want an accounting, you may write to us or fill out an Accounting Request Form available from our Medical Records Manager.
Our accounting will not include certain disclosures, including disclosures for treatment, payment or health care operations, disclosures to you or your personal representative, or disclosures authorized by you or your personal representative. If you ask for an accounting more than once every twelve (12) months, we may charge you a fee to cover the costs of the accounting.
A right to request restrictions on uses and disclosures: You have the right to ask that we restrict the use and disclosure of your protected health information to carry out treatment, payment or health care operations. In general, we don’t have to say yes to your request. If we say yes, we must follow the restrictions we agree to (except if information is needed for emergency treatment). If you paid out-of-pocket for a specific item or service, you have the right to request that medical information with respect to that item or service not be disclosed to a health plan for purposes of payment or health care operations, and we are required to honor that request. You may cancel your restrictions at any time. We may cancel a restriction at any time, so long as we tell you about the cancellation and continue to apply the restriction to information collected before the cancellation.
A right to request an alternative method of contact or communication: You have the right to ask to be contacted at a different location or in a different way. For example, you may want to have all written information mailed to your work address instead of to your home address or to one relative rather than another. We will agree to any reasonable request for other ways of contacting you. If you would like to ask for another way of being contacted, please submit your request in writing to our Medical Records Manager.
Email – We can contact you or your representative by email if you request. Please be aware that email may compromise the security and privacy of your protected health information.
Right to Receive Notice of a Breach: We are required to notify you by first class mail or by e-mail (if you have indicated a preference to receive information by e-mail), of any breaches of Unsecured Protected Health Information as soon as possible, but in any event, no later than sixty (60) days following the discovery of the breach. “Unsecured Protected Health Information” is information that is not secured through the use of a technology or methodology identified by the Secretary of the U.S. Department of Health and Human Services to render the Protected Health Information unusable, unreadable, and undecipherable to unauthorized users. The notice is required to include the following information: