HIPAA NOTICE OF PRIVACY PRACTICES
CareClix Network, PA
Effective Date: October 2023
1. Get an Electronic or Paper Copy of Your Medical Record
You may ask to see or obtain an electronic or paper copy of your medical record and other health information we maintain about you. We generally will provide access, a copy, or a summary within the time required by law. We may charge a reasonable, cost-based fee.
2. Ask Us to Correct Your Medical Record
You may ask us to correct or amend health information about you that you believe is incorrect or incomplete. We may deny your request in circumstances permitted by law, with a written explanation.
3. Request Confidential Communications
You may ask us to communicate with you about your health information in a particular way or at a different location (e.g., specific phone or email). We will accommodate reasonable requests.
4. Ask Us to Limit What We Use or Share
You may ask us not to use or disclose certain health information for treatment, payment, or operations. We are not required to agree to every restriction, but if we do, we will follow it except in emergencies.
5. Get a List of Certain Disclosures
You may request an accounting of certain disclosures made during the six years before your request. This excludes treatment, payment, and operations disclosures. One accounting per 12-month period is free.
6. Get a Copy of This Notice
You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically. It is also available on our website.
7. Choose Someone to Act for You
If someone has legal authority (e.g., power of attorney or guardian), they may exercise your privacy rights. We may verify their authority before taking action.
8. File a Privacy Complaint
You may file a complaint if you believe your rights have been violated by contacting us or the U.S. Dept. of Health and Human Services. We will not retaliate.
9. Family Members, Friends, and Others Involved in Your Care
You may tell us your preferences about sharing info with family or friends involved in your care. If you are incapacitated, we will act in your best interest.
10. Disaster Relief
We may disclose relevant info to disaster-relief organizations to notify family members about your location or status.
11. Marketing, Sale of PHI, and Psychotherapy Notes
We generally obtain written authorization before using/disclosing PHI for marketing, selling PHI, or sharing psychotherapy notes. You may revoke authorization at any time.
12. Treatment
We may use and disclose your health information to provide, coordinate, or manage your healthcare (e.g., sharing info with another professional involved in your care).
13. Payment
We may use and disclose your health information to bill for and obtain payment for healthcare services from health plans or other responsible payers.
14. Healthcare Operations
We use info for activities necessary to operate CareClix Network, such as quality assessment, provider credentialing, auditing, and compliance.
15. Business Associates
We may disclose PHI to third parties (Business Associates) that perform services for us requiring PHI access. They are required to safeguard your information.
16. Public Health and Safety
We may disclose info for public health activities, reporting adverse reactions, product recalls, or reporting suspected abuse/neglect.
17. Health Oversight Activities
We may disclose PHI to oversight agencies for authorized activities like audits, investigations, and licensure matters.
18. Research
We may use or disclose PHI for research when it satisfies HIPAA and other legal requirements.
19. Required by Law
We will disclose health information when federal, state, or other applicable law requires us to do so.
20. Organ and Tissue Donation
We may disclose info to organizations involved in organ or tissue donation and transplantation as permitted by law.
21. Medical Examiners and Funeral Directors
We may disclose info to coroners, medical examiners, and funeral directors when permitted or required by law.
22. Workers’ Compensation
We may use or disclose info as authorized to comply with workers’ compensation or similar programs.
23. Law Enforcement and Government Functions
We may disclose info for law-enforcement purposes and governmental functions like military activities or national security as permitted by HIPAA.
24. Lawsuits and Legal Proceedings
We may disclose info in response to a court order, subpoena, or other lawful legal process.
25. Records Subject to 42 CFR Part 2
Substance use disorder records are protected by additional federal confidentiality requirements and generally require written consent for disclosure.
26. Laws Providing Greater Privacy Protection
When state or other laws provide stricter privacy protections than HIPAA (e.g., HIV/AIDS or genetic info), we follow the more protective requirement.
27. Our Legal Duties
We are required by law to maintain PHI privacy, provide this Notice, notify you of breaches, and honor your privacy rights.
28. Telehealth Services
PHI created or received in connection with telehealth encounters is protected in accordance with HIPAA and other applicable privacy laws.
29. Electronic Notice and Patient Portal
This Notice may be provided electronically for your first service. You retain the right to a paper copy. Requests can be submitted via the secure portal.
30. Changes to Our Privacy Practices
We may change the terms of this Notice. Updated Notices will be available upon request and posted prominently on our website.