Use and Disclosure of Protected Health Information
The following categories summarize ways that HRCentral may use and disclose PHI . Some of the categories include examples , but every type of disclosure in a category is not listed . The term “ you ” generically refers to you and your family member ( s ). Except for the purposes described below , we will use and disclose PHI only with your written permission . For example , in general and subject to specific conditions , we will not use or disclose your psychiatric notes ; we will not use or disclose your PHI for marketing ; and we will not sell your PHI , unless you give us a written authorization . If you grant permission to use and disclose PHI for a purpose not discussed in this notice , you may revoke that permission , in writing , at any time by contacting the Privacy Officer .
In accordance with HIPAA , HRCentral may use and disclose PHI for the following purposes :
» For Treatment : HRCentral may disclose your PHI to a health care provider who renders treatment on your behalf .
» For Payment : HRCentral may use and disclose PHI so that we or others may bill or receive payment from you , an insurance
company or a third party for the treatment and services you received . For example , we may use and disclose PHI to assist employees with denied claims .
» For Health Care Operations : HRCentral may use and disclose PHI for health care operations purposes . These uses and
disclosures are necessary for our operation and management purposes . For example , we may use PHI for purposes of assessing health care plan service , quality or performance , for analyzing associated costs or for underwriting , premium rating and other activities relating to plan coverage . However , we will not use your genetic information for underwriting purposes . We may also use PHI for plan enrollment / eligibility purposes on behalf of an employee , or for assisting an employee with correcting benefits problems and understanding plan coverage / terminology .
» As Required by Law : HRCentral will disclose PHI when required to do so by federal , state or local law .
» Lawsuits and Disputes : If you are involved in a lawsuit or dispute , HRCentral may disclose PHI in response to a court or administrative order . We may also disclose PHI in response to a subpoena , discovery request or other lawful process .
» Law Enforcement / National Security and Intelligence Activities : HRCentral may release PHI if asked to do so by a law
enforcement official in response to a court order , subpoena , warrant , summons or similar process . We may also disclose PHI to authorized federal officials for intelligence , counterintelligence and other national security activities authorized by law .
» To a Business Associate : Certain services are provided to HRCentral by third-party administrators known as “ business associates .” The Plan requires its business associates , through contract , to appropriately safeguard your health information .
» Military and Veterans : If you are or become a member of the U . S . Armed Forces , HRCentral may release medical information about you as deemed necessary by military command authorities .
» To Avert Serious Threat to Health or Safety : HRCentral may use and disclose your PHI , when necessary , to prevent serious threat to your health and safety or the health and safety of the public or another person .
Breach of Unsecured PHI
You must be notified in the event of a breach of unsecured PHI . A “ breach ” is the acquisition , access , use , or disclosure of PHI in a manner that compromises the security or privacy of the PHI . PHI is considered compromised when the breach poses a significant risk of financial harm , damage to your reputation , or other harm to you . This does not include good faith or inadvertent disclosures or when there is no reasonable way to retain the information . You must receive a notice of the breach as soon as possible and no later than 60 days after the discovery of the breach .
Individual Rights
You have the following rights regarding PHI that HRCentral maintains about you :
» Right to Inspect and Copy : You have the right to inspect and copy PHI that may be used to make decisions about your care ,
payment for your care or for your health care operation , including your PHI maintained in an electronic format . If your PHI is available in an electronic format , you may request access electronically and that this be transmitted directly to someone you designate . To inspect and copy this PHI , you must make your request in writing to the Privacy Officer .
» Right to Amend : If you feel that PHI HRCentral has is incorrect or incomplete , you may ask HRCentral to amend the information .
You have the right to request an amendment for as long as the information is kept by or for HRCentral . To request an amendment , you must make your request , in writing , to the Privacy Officer . We may deny the request if it is not in writing or does not include a reason to support the request . In addition , we may deny your request if you request amendment of information that :
– Was not created by HRCentral , unless the person or entity that created the information is no longer available to make the amendment ;
– Is not part of the PHI kept by HRCentral ;
– Is not part of the information that you are permitted to inspect and copy ;
– Is without question accurate and complete .
» Right to an Accounting of Disclosures : You have the right to request an “ accounting of disclosures ,” including a disclosure
involving an electronic health record . This is a list of the disclosures we made of your PHI that is not one of the uses and disclosures described in this notice . To request this list , you must submit your request , in writing , to the Privacy Officer .
30 HRCentral