Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Effective Date
This Notice of Privacy Practices (“Notice”) took effect on August 24, 2022. It will remain in effect until Access BHC, licensed clinical social worker PC (Access BHC) replaces it. Access BHC must abide by the terms of this Notice while it is in effect.
Access BHC ’s Commitment to Your Privacy
Access BHC is an organized group health care organization. Access BHC is a clinically integrated care practice in which our clients receive health care (“Services”) from more than one health care provider. Access BHC respects and is committed to protecting the privacy of your medical information. In performing its services, Access BHC will receive, create, and disclose your protected health information (‘PHI’). Access BHC is required by law to maintain the privacy and security of your PHI and to provide you with notice of our legal duties and privacy practices with respect to your PHI. For information about our collection, use, and disclosure of personal information other than PHI, please see our privacy policy at www.accessmybhc.com.
Your Information. Your Rights. Our Responsibilities.
In this Notice, we describe:
Information We Collect About You
To provide you with the services, we collect PHI about you from a few sources including directly from you. PHI is information about you that may be used to identify you (such as your name), and that relates to:
PHI Collected From You
PHI Collected from Third Parties
PHI Collected Automatically
Of course, as you use our Services you will need to provide Access BHC with information about yourself and your medical history, past treatment, and potential future treatment options. As you communicate with us, your telephone calls, emails, and other communications between you and Access BHC’s service providers, may be recorded and logged. As such, we will collect and maintain all information discussed during such communications including your identity, the date and time of the communication, and the contents of the communications.
In connection with our services, we may collect information about you from third parties such as:
When you register and/or log in to our secure websites and mobile apps, Access BHC automatically collects information about you. Access BHC must be able to link your activity back to your identity so that changes in our systems can be made and we can track the Services you used. As such, we automatically collect the following types of information about you when you use our secure websites:
When We Use and Share Your Information
To provide you with the Services, we will need to use and disclose your PHI for the following reasons:
Treatment Activities
Payment Activities
Healthcare Operations Purposes
We will use your PHI within Access BHC to treat you and provide you with medical services. We may also disclose your PHI to other physicians or healthcare providers so that they can treat you and provide you with medical services. When you use our Services, to enhance the continuity and quality of care we provide to you, your PHI may be available to providers within Access BHC for them to provide you with treatment and medical services. For example, your past consults will be available to the provider when you seek a new consult.
We can use and share your PHI to get paid and for other payment activities. For example, we will send a claim to your health insurer to get paid. We may share PHI with other entities covered by HIPAA, such as health plans, for their payment activities.
Access BHC may use and disclose your PHI to run our business. For example, to improve medical services, provide customer service, conduct quality review, contact you about the Services available to you and health benefits, monitor the qualifications of providers, and other healthcare operations activities. We may share PHI with other entities covered by HIPAA, such as health plans, for their business operations only if they also have or had a relationship with you.
We may also use PHI to:
When We Must Share Your Information
There are limited times when Access BHC may be permitted or required by law to use or disclose your PHI without your authorization. These include the following:
When We Need Your Authorization to Use or Share Your Information
When We Need Your Authorization to Use or Share Your Information. For instance, your written authorization is needed prior to us using and disclosing your PHI :
If Access BHC wants to use or disclose your PHI for the purposes listed above or for any other purpose not described in this Notice, we will seek your authorization using the HIPAA Authorization to Disclose Protected Health Information Form on our website www.accessmybhc.com. You have the right to revoke any authorization that you previously provided.
Your Rights Regarding Your PHI
You have the following rights regarding your PHI maintained by Access BHC. Additionally, your medical power of attorney or legal guardian can exercise these rights on your behalf and make choices about your health information.
Right to Access PHI
To request access to information you must submit your request in writing to Access BHC on our standard contact form on our website www.accessmybhc.com. We may impose a fee for the costs related to copying and mailing. We may deny your request to access your PHI in certain limited circumstances. If that occurs, we will inform you of the reason for the denial.
Right to Request Amendment of PHI
You have a right to request that we amend your PHI if you believe it is incorrect. To request an amendment of your PHI you must submit your request in writing to Access BHC on our standard contact form on our website www.accessmybhc.com. If Access BHC denies your request, you will be permitted to submit a statement of disagreement for inclusion in your records.
Right to Request Restrictions on Uses and Disclosures of PHI
You have the right to request that Access BHC not use or disclosure your PHI for treatment, payment, or healthcare operations purposes. To request a restriction, you must submit your request in writing to Access BHC on our standard contact form on our website www.accessmybhc.com. Access BHC is not required to agree to your request unless you are requesting that we not disclose your PHI to your insurance company or health plan. In such cases, you will be required to pay for services out of pocket.
Right to Request Confidential Communication
You may request that Access BHC communicate with you through alternate means or at an alternate location. To request confidential communications, you must submit your request in writing to Access BHC on our standard contact form on our website www.accessmybhc.com. Access BHC is not required to agree to your request however we will use best efforts to agree to reasonable requests.
Right to Request an Accounting of Disclosures
You have a right to receive an accounting of disclosures Access BHC has made of your PHI. To request for an accounting of disclosures, you must submit your request in writing to Access BHC on our standard contact form on our website www.accessmybhc.com. Your right to an accounting of disclosures does not include disclosures made for treatment, payment or healthcare operations, disclosures made pursuant to an authorization, and certain other disclosures. Your first accounting will be free of charge.
You also have the right to: 1) Obtain a paper copy of this Notice from Access BHC at any time upon request; 2) File a complaint with Access BHC and/or the Secretary of Health and Human Services (at www.hhs.gov/ocr/privacy/hipaa/complaints/) if you believe that your privacy rights have been violated; and 3) Obtain more information about Access BHC ’s privacy practices by contacting the Privacy Officer in the following ways:
By email info@accessmybhc.com
By phone 800-988-3966 (toll free)
How We Keep Your PHI Safe
The security of your PHI is very important to us and all the PHI you provide to Access BHC is protected by strict security safeguards. We use administrative, technical, and physical safeguards to keep your PHI from unauthorized access, and other threats and hazards to its security and integrity. We base our security program on complying with state and federal law, including the HIPAA Security Regulations, as well as industry best practices. We regularly validate the controls we have in place through annual assessment. More specifically, we protect the confidentiality of your PHI in many ways including the following:
If your unsecured PHI is disclosed to an unauthorized person, despite our security safeguards, we will notify you promptly if such disclosure may have compromised the privacy or security of the PHI.
Changes To this Notice
Access BHC reserves the right to change the terms of this Notice at any time, as long as the changes are in compliance with applicable laws. If Access BHC changes the terms of this Notice, the new terms will apply to all PHI that it maintains. If Access BHC changes this Notice, it will post the new Notice on its Website and will make the new Notice available upon request.
©Copyright. All rights reserved.