Notice of Privacy Practices - Olathe Health System, Inc.
This notice describes how medical information about you may be used and disclosed and how you can get access to this information.
PLEASE REVIEW IT CAREFULLY!
Effective Date: April 14, 2003
This “Notice” describes Olathe Health System’s privacy practices and how we may use and disclose your protected health information. Olathe Health System is defined as Olathe Health System, Inc., Olathe Medical Center, Inc., Miami County Medical Center, Inc., Olathe Medical Services, Inc., Pharmacy Express and its medical staff members participating in the Organized Health Care Arrangement. This Notice describes our responsibilities required by law and your rights to access and control your protected health information. “Protected health information” is information about you, including demographic information, that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services. An explanation of this information and how it is used and disclosed is provided on the following pages.
RESPONSIBILITIES OF OLATHE HEALTH SYSTEM
Olathe Health System is required by law to:
- Keep your health information private and only disclose it when required to do so by law;
- Provide you with this notice that explains our legal duties and privacy practices in connection with your health records; and
- Obey the rules found in this notice.
The Olathe Health System, members of its workforce and medical professionals serving on the medical staff may have access to and share medical information for treatment, payment and health care operations described in this notice. We will not use or disclose your health information without your written authorization, except as explained in this notice or as required by law. Certain laws may require that we disclose your health information without your written authorization and we are obligated to follow those laws.
If you see a physician or other health care provider in their private office, different policies or practices may apply. You may want to ask them for a copy of their notice of privacy practices.
HOW WE MAY USE AND DISCLOSE MEDICAL INFORMATION ABOUT YOU
For Treatment: We may use health information about you to provide you with medical treatment or services. We may disclose (release) health information about you to your doctors, nurses, technicians, therapists, students, other staff or personnel who are involved in taking care of you. For example, a doctor treating you for a broken bone may need to know if you have diabetes because diabetes may slow the healing process. Health care providers also may share health information about you in order to coordinate the different services you need, such as prescriptions, lab work and x-rays. We may disclose health information about you to people outside our organization in order to make arrangements for your continued medical care or support services.
For Payment: Your protected health information may be used as needed to bill for or receive payment for treatment and services rendered. This may include, but is not limited to, communication with insurance companies, medical review organizations and other health care providers. For example, we may submit a claim or request for payment to your insurance company for an exam, surgery or treatment you received at our facility. The insurance company may ask us for more information about the care provided in order to pay us or reimburse you for those services. We may also tell your health plan about a treatment you are going to receive in order to obtain prior approval or to determine whether your plan will cover the treatment.
For Health Care Operations: We may use or disclose your protected health information in order to support business activities that are considered necessary to run our hospitals and clinics, and to make sure that all of our patients receive quality care. For example, we may use your health information to review our treatment and services and to evaluate the performance of our staff in caring for you. We may share your information with business associates that perform various activities on our behalf, such as a medical transcription services, voluntary accreditation programs, third party billing companies, legal services and others.
Individuals Involved in Your Care or Payment for Your Care: We may disclose your health information to your family or friends or any other person identified by you when they are involved in your care or payment for your care. We will only disclose the health information directly related to their involvement in your care or payment. We may also use or disclose your health information to notify or assist in the notification of a family member, personal representative, or another person responsible for your care, of your location, general condition or death. If you are available, we will give you an opportunity to object to these disclosures, and we will not make these disclosures if you object. If you are not available, we will determine whether a disclosure to your family or friends is in your best interest and we will disclose only the information that is directly related to their involvement in your care. When permitted to do so by law, we may coordinate our uses and disclosures of your health information with public or private entities authorized to assist in disaster relief efforts.
Patient Information Directory: If you are a patient in one of our hospitals, we may provide some general information (your location and your general condition) to people who ask for you by name. We may also share your religious affiliation with a member of the clergy. This information is the “Patient Information Directory.” If you do not want to be included in this directory you must tell the Registration Clerk when you check in.
Appointment Reminders and Treatment Communications: We may contact you by telephone or mail as a reminder that you have an appointment for treatment or medical care. We may also contact you by telephone or mail regarding test results or other treatment information. We may leave a brief message on your answering machine/voicemail system unless you tell us not to. See also Right to Request Alternative Communications in this notice.
Treatment Alternatives and Health-Related Benefits and Services: We may use and disclose health information to tell you about or recommend possible treatment options or alternatives and health-related benefits and services offered by our organization that may be of interest to you.
Fundraising Activities: Olathe Medical Center Charitable Foundation (OMCCF) may use only demographic information to contact you in an effort to raise money for the organization and its operations. You may opt out of receiving further fundraising materials by contacting the OMCCF. We will make every effort to honor your request.
Research: We may use and disclose health information about you for research purposes. Generally, we will only use and disclose information about you with your written authorization. However, in limited circumstances, we may use and disclose information without your written authorization if this use or disclosure has been approved through a special approval process. We may also disclose health information about you to people preparing to conduct a research project, for example, to help them look for patients with specific health needs, so long as the health information they review does not leave the hospital or clinic.
As Required by Law: We will disclose health information about you when required to do so by federal, state or local law.
To Avert a Serious Threat to Health or Safety: We may use and disclose health information about you when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person. Any disclosure, however, would only be to someone able to prevent the threat.
SPECIAL SITUATIONS (Other uses and disclosures that do not require authorization)
Organ and Tissue Donation: We may release health information to organizations that handle organ procurement or organ, eye or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.
Military and Veterans: If you are a member of the armed forces, we may release health information about you as required by military command authorities. We may also release health information about foreign military personnel to the appropriate foreign military authority.
Employers: We may release health information about you to your employer if we provide health care services to you at the request of your employer, and the health care services are provided either to conduct an evaluation relating to medical surveillance of the workplace or to evaluate whether you have a work-related illness or injury. In such circumstances, we will give you written notice of such release of information to your employer. Any other disclosures to your employer will be made only if you execute a specific authorization for the release of that information to your employer.
Workers’ Compensation: We may release health information about you for workers’ compensation or similar programs. These programs provide benefits for work-related injuries or illness.
Public Health Activities: We may disclose health information about you for public health activities. These activities generally include the following:
- To prevent or control disease, injury or disability (e.g. disease or trauma registries);
- To report births and deaths;
- To report abuse or neglect;
- To report reactions to medications or problems with products;
- To notify people of recalls of products they may be using;
- To notify a person who may have been exposed to a disease or condition;
- To provide PHI to medical device manufacturers (if a medical device is required for your care) who may need to contact you about the device.
Health Oversight Activities: We may disclose health information to a health oversight agency for activities authorized by law. These oversight activities include, for example, audits, investigations, inspections, and licensure. These activities are necessary for the government to monitor the health care system, government programs, licensing functions, and compliance with civil rights laws.
Judicial and Administrative Proceedings: We may disclose health information about you in response to a court or administrative order. We may also disclose health information about you in response to a subpoena, discovery request or other lawful process, but only if efforts have been made to tell you about the request or to obtain an order protecting the information requested.
Law Enforcement: We may release health information if asked to do so by a law enforcement official:
- in response to a court order, subpoena, warrant, summons or similar process;
- to identify or locate a suspect, fugitive, material witness, or missing person;
- about the victim of a crime under certain limited circumstances;
- about a death we believe may be the result of criminal conduct; and
- about criminal conduct on our premises.
Coroners, Medical Examiners and Funeral Directors: We may release health information to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also release health information about patients to funeral directors as necessary to carry out their duties.
National Security and Intelligence Activities: We may release health information about you to authorized federal officials for intelligence, counterintelligence and other national security activities authorized by law.
Protective Services for the President and Others: We may disclose health information about you to authorized federal officials so they may provide protection to the President, other authorized persons or foreign heads of state or to conduct special investigations.
Inmates: If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release health information about you to the correctional institution or the law enforcement official. This release would be necessary 1) for the institution to provide you with health care; 2) to protect your health and safety or the health and safety of others; or 3) for the safety and security of the correctional institution.
OTHER USES AND DISCLOSURES
Other uses and disclosures of your health information not covered in the previous sections of this notice will only be made with your written permission or authorization. If you have given us permission to use or disclose your health information you may also revoke that authorization, in writing, at any time. Once you revoke your authorization, we will no longer use or disclose the information about you for the reasons covered by that authorization, but we cannot take back any uses or disclosures already made with your permission.
Although your health record is the physical property of the hospitals or medical clinics that created it, the information belongs to you. You have the following rights regarding the health information we maintain:
Right to Request Restrictions: You have the right to request a restriction (limitation) on the health information we use or disclose about you for your treatment, payment or healthcare operations. To request restrictions, you must complete, in writing, a Request for Privacy Restrictions and Alternative Communications form, and return it to the Privacy Contact. We are not required to agree to your request. If we do agree, we will notify you in writing and comply with your request unless the information is needed to provide you with emergency treatment or is required by law.
Right to Request Alternative Communications: You have the right to request that we communicate with you about medical matters or billing information in a certain way or location. If you choose to request alternative communications, you may do so in writing, using the Request for Privacy Restrictions and Alternative Communications form to specify how or where you wish to be contacted. We will not ask for the reason for your request but we may ask for clarification. We will accommodate your request if it is reasonable for us to do so.
Right to Inspect and Copy: You have the right to inspect and obtain a copy of your medical information that we use for making decisions about your care. Usually, this includes medical and billing records. To inspect and obtain a copy of your medical records you must submit your request in writing to the Director of Health Information Management or your designated Privacy Contact, using the Authorization to Release Information form. We may charge a fee that includes costs for copying, labor and supplies, and the cost of postage. We may deny your request to inspect or copy your records in certain, limited circumstances. If your request is denied, you will be told in writing. In some instances, you may request that the denial be reviewed. We will comply with the outcome of the review and you will be advised in writing of the reviewing official’s decision.
Right to Amend Your Records: If you feel that health information we have recorded about you is incorrect or incomplete, you may ask us to amend or change the information (for as long as it is maintained by the Olathe Health System). To request an amendment, you must submit the request in writing, using the Request for Amendment of the Designated Record Set form, to the Director or Health Information Management or your Privacy Contact. You must state specifically the reason that supports your request. We may deny your request for an amendment if these criteria are not met. In addition, we may deny your request if you ask us to amend information that:
- was not created by the Olathe Health System, unless the person or entity that created the information is no longer available to make the amendment;
- is not part of the health information kept by or for the Olathe Health System;
- is not part of the information which you would be permitted to inspect and copy; or
- is accurate and complete.
Right to Accounting of Disclosures: You have the right to request an “accounting of disclosures.” This is a list that includes disclosures of your PHI for purposes other than treatment, payment and health care operations. To request this list, you must complete, in writing, the Request for Accounting of Disclosures form, and return it to the Privacy Contact. You may be charged for the cost of providing the list. Once notified of the cost, you may withdraw or modify your request before any costs are incurred.
Right to a Paper Copy of This Notice: You have the right to a paper copy of this notice. You may ask us to give you a copy of this notice at any time. Even if you have agreed to receive this notice through email, you are still entitled to a paper copy of this notice. To obtain a paper copy of this notice, you may call the Privacy Contact or visit our website at www.ohsi.com.
We are committed to protecting the privacy and confidentiality of your personal health information. If you believe that your privacy rights have been violated, you may call one of our Privacy Contacts at the phone number below or file a written complaint with the Chief Privacy Officer, General Counsel Office, Olathe Medical Center, 20333 West 151st Street, Olathe, KS 66061. You may also send your complaint to the Secretary of the U.S. Department of Health and Human Services. You will not be penalized for filing a complaint.
CHANGES TO THIS NOTICE
We reserve the right to change this notice. We reserve the right to make the revised or changed notice effective for health information we already have about you as well as any information we receive in the future. Copies of the current notice will be posted in our facilities. You will find the date the notice became effective on the first page. You may request a copy of the notice currently in effect.
For information on how to submit your written requests or if you have any questions about this notice or our privacy practices, you may call one of the Privacy Contacts at the following numbers:
- 913-791-4255 (KC Metro Area)
- 913-294-6623 (Paola and surrounding areas)
OHSI No. 1284.2