Privacy

Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Who Must Abide by this Notice

• Harris Family Medical Center ("HFMC"), HFMC Pharmacy, University Center Imaging ("UCI"), 4Care and affiliated physicians and health care professionals (collectively "MTT Corp.")
• All employees, staff, and other personnel who provide services at MTT Corp. (HFMC, HFMC Pharmacy, 4Care and UCI)

The people and organizations to which this notice applies (referred to as "we", "our", and "us") have agreed to abide by the terms of this notice. We may share your information with each other for purposes of treatment, and as necessary for payment and operations activities as described below.

Information that this Notice Applies to

This notice applies to any information in our possession that would allow someone to identify you and learn something about your health. It does not apply to information that contains nothing that could reasonably be used to identify you.

Our Legal Duties

• We are required by law to maintain the privacy of your health information.
• We are required to provide this notice of our privacy practices to anyone who asks for it.
• We are required to abide by the terms of this notice until we officially adopt a new notice.

Effective date of this notice: This notice was revised on or about October 7, 2009 and becomes effective on [February 17, 2010].

SUMMARY

In the course of receiving services from MTT Corp. you will provide us with personal information about your health, with the understanding that this information will be kept confidential. We may also obtain information about your health from examinations, tests, or from others who have provided you with care. This notice of our privacy practices is intended to tell you about the ways we may use your information and when we may disclose this information to others.

We use patients' information when providing treatment. We disclose patients' information to other health care providers to assist them in providing you with treatment. We may disclose information to insurance companies as necessary to receive payment. We may use the information within our organization to evaluate quality and improve health care operations. We may make other uses and disclosures of patients' information as required by law or as permitted by our policies.

HOW WE MAY USE OR DISCLOSE YOUR HEALTH INFORMATION.

We may use your health information, or give it out to others, for a number of different reasons. This notice describes these reasons. For each reason, we have written a brief explanation. We also provide some examples. These examples do not include all of the specific ways we may use or disclose your information. Any time we use your information, or disclose it to someone else, it will fit one of the reasons listed here. Unless otherwise permitted by law, we will not receive remuneration directly or indirectly in exchange for your health information or use your health information for marketing purposes unless we have obtained your written authorization. When using or disclosing your health information or requesting your health information from another covered entity, we will take reasonable efforts to limit such use, disclosure, or request, to the extent practicable, to the health information maintained in a limited data set, or if needed, to the minimum necessary to accomplish the intended purposes of such use, disclosure, or request, respectively.

1. Treatment. We will use your health information to provide you with medical care and services. This means that our employees and staff and others who work under our direct control may read your health information to learn about your medical condition and use it to make decisions about your care. For instance, a medical assistant may read your medical chart in order to care for you properly. We will also give your information to others who need it in order to provide you with medical treatment or services. For instance, we may send your doctor the results of laboratory tests or x-rays we perform.
2. Payment. We will use your health information, and disclose it to others, as necessary to obtain payment for the services we provide to you. For instance, an employee in our business office may use your health information to prepare a bill. And we may send that bill, and any health information it contains, to your insurance company. We may also disclose some of your health information to companies with whom we contract for payment-related services. We may give information about you to a health plan that pays for your benefits. We will not use or disclose more information for payment purposes than is necessary.
3. Health Care Operations. We may use your health information for activities that are necessary to operate this organization. This includes reading your health information to review the performance of our staff. We may also use your information and the information of other patients to plan what services we need to provide, expand, or reduce. For example, we may disclose your health information to a company that assists us with quality assurance. We may disclose your health information as necessary to others who we contract with to provide administrative services. This includes our lawyers, auditors, accreditation services, and consultants, for instance.
4. Legal Requirement to Disclose Information. We will disclose your information when we are required by law to do so. This includes reporting information to government agencies that have the legal responsibility to monitor the health care system. For instance, we may be required to disclose your health information, and the information of others, if we are audited by Medicare or Medicaid.
5. Public Health Oversight. We may disclose your health information to a public health oversight agency for oversight activities authorized by law. This includes uses or disclosures in civil, administrative or criminal investigations; licensure or disciplinary actions (for example, to investigate complaints against health care providers); inspections; and other activities necessary for appropriate oversight of government programs (for example, to investigate Medicaid fraud).
6. To Report Abuse. We may disclose your health information when the information relates to a victim of abuse, neglect or domestic violence. We will make this report only in accordance with laws that require or allow such reporting, or with your permission.
7. Law Enforcement. We may disclose your health information for law enforcement purposes. This includes providing information to help locate a suspect, fugitive, material witness or missing person, or in connection with suspected criminal activity. We must also disclose your health information to a federal agency investigating our compliance with federal privacy regulations.
8. Specialized Purposes. We may disclose your health information for a number of other specialized purposes. We will only disclose as much information as is necessary for the purpose. For instance, we may disclose your information to coroners, medical examiners and funeral directors; to organ procurement organizations (for organ, eye, or tissue donation); or for national security and intelligence purposes. We may disclose the health information of members of the armed forces as authorized by military command authorities. We also may disclose health information about an inmate to a correctional institution or to law enforcement officials, to provide the inmate with health care, to protect the health and safety of the inmate and others, and for the safety, administration, and maintenance of the correctional institution. We may also disclose your health information to your employer for purposes of workers' compensation and work site safety laws (OSHA, for instance).
9. To Avert a Serious Threat. We may disclose your health information if we decide that the disclosure is necessary to prevent serious harm to the public or to an individual. The disclosure will only be made to someone who is able to prevent or reduce the threat.
10. Family and Friends. We may disclose your health information to a member of your family or to someone else who is involved in your medical care or payment for care. We may notify family or friends if you are in the hospital, and tell them your general condition. In the event of a disaster, we may provide information about you to a disaster relief organization so they can notify your family of your condition and location. We will not disclose your information to family or friends if you object. We may also disclose to your personal representatives who have authority to act on your behalf (for example, to parents of minors or to someone with a power of attorney).
11. Research. We may disclose your health information in connection with medical research projects if allowed under federal and state laws and rules.
12. Information to Patients. We may use your health information to provide you with additional information. This may include sending you appointment reminders. This may also include giving you information about treatment options or other health-related services that we provide.
13. Lawsuits and Disputes. If you are involved in a lawsuit or dispute, we may disclose your health information in response to a court or administrative order. We may also disclose your health information in conjunction with a judicial or administrative proceeding including a response to a subpoena, discovery request or other lawful request by someone involved in the dispute.

YOUR RIGHTS.

1. Authorization. We will ask for your written authorization if we plan to use or disclose your health information for reasons not covered in this notice. If you authorize us to use or disclose your health information, you have the right to revoke the authorization at any time. If you want to revoke and authorization, send a written notice to the person listed under "Whom to Contact" at the end of this notice. You may not revoke an authorization for us to use and disclose your information to the extent that we have already given out your information or taken other action in reliance on the authorization. If the authorization is to permit disclosure of your information to an insurance company, as a condition of obtaining coverage, other laws may allow the insurer to continue to use your information to contest claims or your coverage, even after you have revoked the authorization.
2. Request Restrictions. You have the right to ask us to restrict how we use or disclose your health information. We will consider your request and make a decision. We are required to comply with a restriction request where the disclosure is to a health plan for purposes of carrying out payment or health care operations, and the health information pertains solely to a health care item or service for which the health care provider has been paid out of pocket in full. If we do agree, we will comply with the request unless the information is needed to provide you with emergency treatment. We cannot agree to restrict disclosures that are required by law.
3. Confidential Communication. You have the right to ask us to communicate with you at a special address or by a special means. For example, you may ask us to send mail to a different address rather than to your home. Or you may ask us to speak to you personally on the telephone rather than sending your health information by mail. We will not ask you to explain why you are making the request. We will agree to reasonable requests.
4. Access to and Copies of Health Information. You have a right to access the health information about you that we have in our records. This right is limited to information about you that is kept in records that are used to make decisions about you. For instance, this includes medical and billing records. Where your health information is contained in an electronic health record, you have the right to obtain a copy of such information in an electronic format, and you may request that we transmit such copy directly to an entity or person designated by you, provided that such choice is clear, conspicuous and specific. We may charge a fee for the cost of copying and mailing the records, to the extent allowed by state and federal law. To ask to inspect your records, or to receive a copy, send a written request to the person listed under "Whom to Contact" at the end of this notice. Your request should specifically list the information you want copied. For example, you should state whether you want medical records, pharmacy records, radiology records, or billing records (e.g. "I want copies of my medical records from June 1, 2003 - August 31, 2003"). We will respond to your request within a reasonable time, but no later than 30 days. We may deny you access to certain information. If we do, we will give you the reason, in writing. We will also explain how you may appeal the decision.
5. Amend Health Information. You have the right to ask us to amend health information about you which you believe is not correct, or not complete. You must make this request in writing, and give us the reason you believe the information is not correct or complete. We will respond to your request in writing within 30 days. We may deny your request if we did not create the information, if it is not part of the records we use to make decisions about you, if the information is something you would not be permitted to inspect or copy, or if it is complete and accurate.
6. Accounting of Disclosures. You have a right to receive an accounting of certain disclosures of your information to others. Beginning January 1, 2011 or January 1, 2014, depending on the compliance date required by law for a particular record, an accounting of the disclosures of information in an electronic health record will include disclosures for treatment, payment, or healthcare operations. This accounting will list the times we have given your health information to others. The list will include dates of the disclosures, the names of the people or organizations to whom the information was disclosed, a description of the information, and the reason. We will provide the first list of disclosures you request at no charge. We may charge you for any additional lists you request during the following 12 months. You must request this list in writing. You must tell us the time period you want the list to cover. You may not request a time period longer than six years. We cannot include disclosures made before April 14, 2003. Disclosures for the following reasons will not be included on the list: disclosures for treatment, payment, or health care operations; disclosures for national security purposes; certain disclosures to correctional or law enforcement personnel; disclosures that you have authorized; and disclosures made directly to you.
7. Paper Copy of this Privacy Notice. You have a right to receive a paper copy of this notice. If you have received this notice electronically, you may receive a paper copy by contacting the person listed under "Whom to Contact" at the end of this notice.
8. Written Notification of a Breach. You have the right to receive written notification of a breach where your unsecured health information has been accessed, acquired, used, or disclosed to an unauthorized person in a manner that compromises the security or privacy of the health information. Unless specified in writing by you to receive the notification by electronic mail, we will provide such written notification by first-class mail or, if necessary, by such other substituted forms of communication allowable under the law.
9. Complaints. You have a right to complain if you think your privacy has been violated. We encourage you to contact our Privacy Official, or the person listed under "Whom to Contact" at the end of this notice. You may also file a complaint with the Secretary of the Department of Health and Human Services. We will not retaliate against you for filing a complaint.

OUR RIGHT TO CHANGE THIS NOTICE.

We reserve the right to change our privacy practices, as described in this notice, at any time. We reserve the right to apply these changes to any health information which we already have, as well as to health information we receive in the future. Before we make any change in the privacy practices described in this notice, we will write a new notice that includes the change. We will post the new notice in HFMC, UCI and 4Care waiting rooms. The new notice will include an effective date.

WHOM TO CONTACT.

Contact the person listed below:

• For more information about this notice, or
• For more information about our privacy policies, or
• If you want to exercise any of your rights, as listed on this notice