Privacy Policy
Privacy Policy
As required by the "Privacy Rule" to implement the requirement of the Health Insurance Portability and Accountability Act of 1996 ("HIPAA") below is our Notice which describes our duties to protect your privacy, your rights under the Privacy Rule, the ways in which we may use and disclose your protected health information (PHI), and our point of contact for further information and for making complaints to us.
Our Practice has a duty to protect your Health information. “Protected Health Information” or “PHI” is any individually identifiable information relating to your past, present, or future physical/mental health, provision of care, or payment for services. It includes identifiers like names, social security numbers, medical records and photos created or held in any form. A central aspect of the Privacy Rule is the principle of "minimum necessary" use and disclosure. We will make reasonable efforts to use, disclose, and request only the minimum amount of PHI needed to accomplish the intended purpose of the use, disclosure, or request. The Privacy Rule requires us to treat your "personal representative" the same as you, with respect to uses and disclosures of your PHI, as well as your rights under the Rule. A personal representative is a person legally authorized to make health care decisions on your behalf or to act for a deceased individual or the estate. In most cases, parents are the personal representatives for their minor children. Therefore, in most cases, parents can exercise individual rights on behalf of their minor children.
Access. Except in certain circumstances, you have the right to review and obtain a copy of your PHI which we maintain. You must make the request in writing and we will respond within 30 days of your request. We may deny you access in certain specified situations, such as when we believe access could cause harm to you or another individual. In such situations, you will be given the right to have such denials reviewed by a licensed health care professional for a second opinion. We may impose reasonable, cost-based fees for the cost of copying and postage.
Amendment. You have a right to ask us to amend your PHI in our records if that information is inaccurate or incomplete. You must make the request in writing and provide a reason to support your request. If we accept the amendment request, we will make reasonable efforts to provide the amendment within 60 days of your written request. If your request is denied, we will provide you with a written denial and allow you to submit a statement of disagreement which we will include in our records.
Disclosure Accounting. You have a right to an accounting of our disclosures of your PHI for the immediately preceding six years prior to your request. Your request must be in writing and we will respond within 60 days of your request. We will not include disclosures made (a) for treatment, payment, or health care operations; (b) to you or your authorized representative; (c) for notification of or to persons involved in your health care or payment for health care, or for disaster relief (d) pursuant to your authorization; (f) for national security or intelligence purposes; (g) to correctional institutions or law enforcement officials for certain purposes; or (h) incident to otherwise permitted or required uses or disclosures. We will provide one accounting during any 12- month period without charge, but we will charge you a reasonable fee for each additional request made within the same year.
Restriction Request. You have the right to request that we restrict use or disclosure of your PHI for treatment, payment or health care operations, disclosure to persons involved in your health care or payment for your health care, or disclosure to notify family members or others about your general condition, location, or death. We will consider your request but are not obligated to agree to requests for restrictions. If we agree, we will comply with the agreed restrictions, except for purposes of treating you in a medical emergency.
Confidential Communications Requirements. You may request an alternative means or location for receiving communications related to your PHI by means other than those that we typically use. We will agree to your request if we can reasonably abide by it.
Your Right to this Notice. You may request a paper copy of this notice at any time, even if you have agreed to receive this Notice electronically.
We may not use or disclose your PHI except either: (1) as the Privacy Rule permits or requires; or (2) as you or your authorized representative authorizes in writing. We are required to disclose your PHI in only two situations: (a) to you (or your authorized representatives) specifically when you request access to, or an accounting of disclosures of, your PHI; and (b) to HHS when it is undertaking a compliance investigation or review or enforcement action.
We may use and disclose your PHI information, without your authorization, for the following purposes or situations:
(1) To You the Individual: We may disclose your PHI to you.
(2) Treatment, Payment, Health Care Operations: We may use and disclose your PHI for our Treatment- the provision, coordination, or management of your health care including consultation between other providers and referral by one provider to another. We may also use and share your PHI for our Health care operations. This includes any of the following activities: (a) quality assessment and improvement activities; (b) competency assurance activities; (c) conducting or arranging for medical reviews, audits, or legal services; (d) specified insurance functions; (e) business planning, development, management, and administration; and (f) business management and general administrative activities. Another reason that we may use and disclose your PHI is for Payment. This encompasses our activities to obtain payment or reimbursement for the health care provided to you.
(3) Uses and Disclosures with Opportunity to Agree or Object: Informal permission may be obtained by asking you outright, or by circumstances that clearly give you the opportunity to agree, acquiesce, or object. Where you are incapacitated, in an emergency situation, or not available, we generally may make such uses and disclosures, if in our professional judgment, the use or disclosure is determined to be in your best interests.
(4) Incidental Use and Disclosure: We may use or disclose your PHI as a result of, or as "incident to," an otherwise permitted use or disclosure as long as we have adopted reasonable safeguards as required by the Privacy Rule, and the information being shared is limited to the "minimum necessary," as required by the Privacy Rule.
(5) Public Interest and Benefit Activities: We may use and disclose your PHI without your authorization or permission, for twelve national priority purposes. These disclosures are permitted by the Rule in recognition of the important uses made of health information outside of the health care context. These twelve purposes are: (1) as Required by Law, (2) for Public Health Activities, (3) as it pertains to Victims of Abuse, Neglect or Domestic Violence, (4) for Health Oversight Activities, (5) for Judicial and Administrative Proceedings, (6) for Law Enforcement Purposes, (7) to Decedents, funeral directors, coroners or medical examiners, (8) for Cadaveric Organ, Eye, or Tissue Donation, (9) for Research, (10) in cases of Serious Threat to Health or Safety, (11) for Essential Government Functions, and (12) to comply with Workers' Compensation laws.
(6) Limited Data Set: A limited data set is protected health information from which certain specified direct identifiers have been removed. We may use and disclose a limited data set for research, health care operations, and public health purposes, provided the recipient agrees to specified safeguards PHI within the limited data set.
We will obtain your written authorization for any use or disclosure of your PHI that is not for treatment, payment or health care operations or otherwise permitted or required by the Privacy Rule. You can later revoke your authorization in writing except to the extent we have already acted in reliance on your authorization. We will not condition treatment upon you granting an authorization, except in limited circumstances. Examples of disclosures that would require your authorization include disclosures to a life insurer for coverage purposes, disclosures to an employer, or disclosures to a pharmaceutical firm for their own marketing purposes.
(1) Marketing: Marketing is any communication about a product or service that encourages recipients to purchase or use the product or service. We will obtain an authorization to use or disclose your PHI for marketing, except for face-to-face marketing communications, and for our provision to you of promotional gifts of nominal value. We may use or disclose your PHI to identify health-related services and products that may be beneficial to your health and then contact you about the services and products.
(2) Sale of PHI: We will disclose your PHI in a manner that constitutes a sale only upon receiving your prior authorization. Sale of PHI does not include a disclosure of PHI for sale, transfer, merger or consolidation of all or part of our business and for related due diligence activities.
(3) Fundraising Activities: We may use certain information to contact you for our fundraising activities. If you do not want to receive future fundraising requests, please write to the Compliance Department at the below address.
If you feel we have violated your rights you have the right to complain. You may contact us via email compliance@supremesleepllc.com or in writing to 155 Willowbrook Blvd Ste 110 PMB7579 Wayne NJ 07470. You may file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by visiting www.hhs.gov/ocr/ privacy/hipaa/complaints,; in writing to 200 Independence Avenue, S.W., Washington, D.C. 20201, or by calling 1-877-696-6775. We will not retaliate against you for filing a complaint.