HIPAA Privacy Practices
Notice of Privacy Practices
Grand View Urgent Care At Kulpsville and Quakertown
This notice of privacy practices describes how medical information may be used and disclosed, and how you can get access to this information. Please review it carefully.
-
Who Presents This Notice
This Notice describes how Grand View Urgent Care, and the healthcare providers involved in your care at the Urgent Care Centers, will use and disclose your protected health information (PHI). This Notice only applies to the protected health information created or obtained in connection with care provided to you in or by the Urgent Care Center. It describes the practices of all Grand View Urgent Care employees, students, staff and other personnel working at Grand View Health sites.
This Notice of Privacy Practices is effective as of October 1, 2016. If you have any questions about this Notice, please contact Grand View Health’s Privacy Officer at 215-453-4000.
Grand View Urgent Care is required to give you this Notice to comply with the regulations (“The Privacy Rule”) established under federal laws called the Health Insurance Portability and Accountability Act (”HIPAA”) and the Health Information Technology for Economic and Clinical Health Act (”HITECH”). Grand View is committed to protecting your medical information, including health information protected by HIPAA and other federal and state laws, and using that information appropriately.
This Notice is intended to describe your rights, and to inform you about ways in which Grand View Urgent Care may use and disclose your protected health information (”PHI”), and the obligations Grand View Urgent Care has when using and disclosing your PHI. Your personal physician or any other provider of your health care services may have different policies or Notices regarding their use and disclosure of your PHI which is created in that provider’s office. Please review them carefully. Changes to this notice will not be honored.
-
How We May Use And Disclose Your Protected Health Information
- The Privacy Rule allows Grand View Urgent Care to use and disclose your PHI for purposes of treatment, payment, and Grand View health care operations without your consent or authorization. Any uses or disclosures for payment or health care operations must be limited to the minimum necessary to accomplish the purpose of the use or disclosure.
- Treatment. Grand View Urgent Care may use your PHI to provide you with medical treatment or services, to coordinate or manage your health care services, and to facilitate consultation or referrals as part of your treatment. For example, if you are being treated for a knee injury, Grand View Urgent Care may disclose your PHI to the physical rehabilitation department in order to coordinate your care. Different departments at Grand View Urgent Care also may share your medical records in order to coordinate your treatment and care, such as prescriptions, lab and x-ray tests. Grand View Urgent Care may disclose your medical records to people outside of Grand View Urgent Care after you leave a Grand View Urgent Care facility, including family members, clergy, or other health care providers such as nursing homes or home health agencies. We may also use your PHI to remind you about appointments or to follow up on your visit.
- Payment. Grand View Urgent Care may use and disclose your PHI to send bills and collect payment from you, your insurance company or other third parties, for the treatment and services provided to you by Grand View Urgent Care. For example, Grand View Urgent Care may provide portions of your PHI to our billing department and your health plan to get paid for the health care services Grand View Urgent Care provided to you. Grand View Urgent Care may also provide your PHI to our business associates, such as billing companies, claims processing companies, and others that process our health care claims or to other persons responsible for your payment.
- Health Care Operations. It is sometimes necessary for Grand View Urgent Care to share your PHI for health care operations to ensure our patients receive high quality care. For example, we may use your PHI for internal administration and planning, and various activities that improve the quality and cost effectiveness of health care services such as the following:
- Quality assessment and improvement activities;
- Protocol development;
- Care management, coordination, and related functions;
- Competency assessments and performance reviews of Grand View employees;
- Training, accreditation, certification, licensing, credentialing or other related activities;
- Insurance related activities;
- Internal patient complaint or grievance resolution; and
- Activities relating to improving health or reducing health care costs.
Additional examples of how Grand View Urgent Care may use and disclose your PHI include:
- Use medical records to review its treatment and services as well as to evaluate the performance of its staff in caring for you;
- Combine medical records about many Grand View Urgent Care patients to decide what additional services the Urgent Care should offer, what services are not needed, and to study the safety and effectiveness of treatments;
- Disclose information to doctors, nurses, and other Grand View Urgent Care personnel for training purposes;
- Remove information that identifies you from a set of medical records so that others may use it to study health care and health care delivery without learning who the specific patients are; or
- Use and disclose medical records to contact you by telephone or in writing as a reminder that you have an appointment for a test or procedure, or to see your doctor.
- Persons Involved in Your Care or Payment for Your Care. Unless you object, Grand View may release PHI about you to a family member, friend, or someone you designate who is involved in your care or payment of medical bills. Grand View may also disclose your PHI to an entity authorized to assist in disaster relief so that those who care for you can receive information about your location or health status.
- Fundraising Activities. Grand View may contact you to solicit contributions to support the expansion and improvement of services and programs we provide to the community. In connection with our fundraising efforts, we may also disclose to our employees or business associates, demographic information about you (e.g., your name, address and phone number), dates on which we provided health care to you, health insurance status, department of service, treating physician and general outcome information. You have the right to opt out of any fundraising activities. If you do not wish to receive any fundraising requests in the future, you may contact the Grand View Health Foundation at 215-513-3935 or respond via one of the methods identified in the fundraising correspondence that you may receive in the future.
- Treatment Options. Grand View Urgent Care may use or disclose your PHI to tell you about or recommend possible treatment options or alternatives that may be beneficial to you. For example, your name, address, and electronic mail address may be used so we can send you newsletters or health care bulletins about Grand View and the services we provide. We may also send you information about health-related products or services that we or others make available and that we think may be useful or of interest to you. You may write to Grand View Health PR/Marketing Department, 700 Lawn Avenue, Sellersville, PA 18960 or contact them via email at info@gvh.org as notification that you do not wish to receive any of our newsletters or other information.
- Research. Under certain circumstances, Grand View may use and disclose your PHI for research purposes. Before a research project begins, it is carefully reviewed to determine if the proposed project’s use of your PHI, balances the needs of medical research with your need for privacy. Before we use or disclose your PHI for research, the project will have been approved by Grand View’s Institutional Review Board (IRB). The IRB is a committee that overseas and approves research studies involving patients.
- Client/Patient Satisfaction Surveys. Grand View may conduct client/patient satisfaction surveys to understand how we can improve our services to patients and their families or friends. For example: A client or patient may receive a survey from a patient satisfaction research organization, asking for comment on the services provided..
- Business Associates. There are some services at Grand View Urgent Care that may be provided through contracts with business associates. Examples include but are not limited to certain laboratory tests and a copy service that we may use to make copies of your health record. When these services are contracted, we may disclose your PHI to our business associate so that they can perform the job we’ve asked them to do. To protect your health information, however, we require the business associate to appropriately safeguard the privacy of your information and are not allowed to use or disclose any information other than as specified in our contract with the business associate.
- Health Information Exchange: Grand View may make your PHI available electronically through a local, state, or national Health Information Exchange (”HIE”). An HIE is an organization that allows health care providers to share patient information so that each provider has as complete a picture as possible about a patient’s health. HIEs can also prevent the duplication of services by allowing physicians at one location to access the results of tests (such as x-rays) performed at another location.Grand View Urgent Care will not disclose your information related to treatment for mental health, development disabilities, alcoholism, substance abuse or drug dependency, venereal disease, genetic information, or information concerning the presence of HIV, antigen or non-antigenic products of HIV or an antibody to HIV, without in each case obtaining your authorization unless otherwise permitted or required by the applicable state or federal law.
- Other Uses and Disclosures. The Privacy Rule and Pennsylvania law (as applicable) allow Grand View Urgent Care to use or disclose your PHI/patient health care records without your authorization or consent for a number of other special functions and activities, described below.
- As Required by Law. Grand View Urgent Care is permitted to disclose your PHI when required to do so by international, federal, state, or local law.
- Public Health. Grand View Urgent Care may use and disclose your PHI for public health activities. These activities generally include the following:
- To prevent or control disease, injury, or disability, to report vital statistics such as births and deaths, and for public health surveillance or interventions;
- To report births and deaths;
- To report abuse or neglect of children, elders, and dependent adults;
- To the Federal Drug Administration (FDA), to report reactions to medications or problems with products, to track products, to enable product recalls, or to conduct post-market surveillance as required by the FDA;
- To notify people of recalls of products they may be using; and
- To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition.
- Victims of Abuse, Neglect, or Domestic Violence. The Privacy Rule authorizes Grand View Urgent Care to notify the appropriate government authority if Grand View Urgent Care believes a patient or resident has been a victim of abuse, neglect, or domestic violence. Grand View Urgent Care will only make this disclosure if you agree or when required or authorized by law.
- Health Oversight Activities. Grand View Urgent Care is permitted to disclose a person’s PHI to a health oversight agency for activities authorized by law, including audits, investigations, inspections, licensure or disciplinary activities, and other similar proceedings. Grand View Urgent Care may not disclose the PHI of a person who is the subject of an investigation that is not directly related to that person’s receipt of health care or public benefits.
- To Avert a Serious Threat to Health or Safety. Grand View Urgent Care may use and disclose a person’s PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person. Any disclosure, however, would only be to someone able to help prevent the threat.
- Funeral Directors, Medical Examiners, and Coroners. Sometimes, Grand View Urgent Care may deem it necessary to release a person’s PHI to funeral directors, so that they can carry out their duties appropriately. Sometimes, when there are concerns about identification of a patient, or determining what caused a death, we will release a person’s PHI to medical examiners or coroners.
- Workers Compensation and Occupational Health and Safety. Grand View Urgent Care may release your PHI to insurers, government administrators, and employers for workers’ compensation or similar programs or for purposes related to occupational health and safety. This relates to care provided for work-related injuries or illness.
- Specialized Government Functions. In certain circumstances, the Privacy Rule authorizes Grand View Urgent Care to use or disclose your PHI to facilitate specified government functions to include:
- Medical Suitability and Intelligence Activities. Grand View may disclose your PHI to the Department of State for use in making suitable determinations.
- Inmates and Correctional Institutions. Should you be an inmate of a correctional institution or under the custody of law enforcement official, Grand View Urgent Care may release your PHI to the correctional institution or law enforcement official, when necessary 1) for the correctional institution or official to provide you with health care; 2) to protect your health and safety or health and safety of others; or 3) for the safety and security of the correctional institution. An inmate does not have a right to the Notice.
- Active Duty Military Personnel. If you are a member of the armed forces, Grand View Urgent Care may release your PHI as required by military command authorities. Grand View Urgent Care may also release PHI of foreign military personnel to the appropriate foreign military authority.
- Government Security, Intelligence and Bioterrorism: Grand View Urgent Care may release your PHI to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.
- Disputes, Lawsuits, Administrative Proceedings. If you are involved in a lawsuit or dispute, the Privacy Rule allows Grand View Urgent Care to disclose your PHI in response to a court or administrative order. Grand View Urgent Care may disclose your PHI in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute, but only if efforts have been made to tell you about the request or to obtain an order protecting the information requested if that is required by law.
- Law Enforcement. Grand View Urgent Care may release your PHI if asked to do so by a law enforcement official:
- In response to a court order, subpoena, warrant, summons, or similar process;
- To identify or locate a suspect, fugitive, material witness, or missing person;
- About the victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement;
- About a death Grand View Urgent Care believe may be the result of criminal conduct;
- About criminal conduct at Grand View Urgent Care; and
- In emergency circumstances to report a crime; the location of the crime or victims, or the identity, description or location of the person who committed the crime.
- Pennsylvania law generally requires a court order for the release of patient health care records in these circumstances and may be considered more protective of your privacy that the Privacy Rule. However, Pennsylvania law does allow the release of confidential patient health care records when a crime occurs on Grand View Urgent Care’s premises and a victim is threatened with bodily harm. Pennsylvania law also requires that gunshot wounds or other suspicious wounds, including burns, that are reasonably believed to have occurred as the result of a crime must be reported to the local police or sheriff. The report must include the nature of the wound and the patient’s name.
- Data Breach Notification Purposes. Grand View Urgent Care may use or disclose your PHI to provide legally required notices of unauthorized access to or disclosure of your PHI.
- Other Uses of Medical Information. Other uses and disclosures of your PHI not covered by this Notice or the laws that apply to us will be made only with your written permission. If you provide us permission to use or disclose your PHI, you may revoke that permission, in writing, at any time. If you revoke your permission, we will no longer use or disclose your PHI for the reasons covered in your authorization. You understand that we are unable to take back any disclosure that Grand View Urgent Care has already made with your permission, and that we are required to retain our records of the care that we provided to you.
- The Privacy Rule allows Grand View Urgent Care to use and disclose your PHI for purposes of treatment, payment, and Grand View health care operations without your consent or authorization. Any uses or disclosures for payment or health care operations must be limited to the minimum necessary to accomplish the purpose of the use or disclosure.
-
Hitech (Health Information Technology for Economic and Clinical Health Act)
- Grand View will notify affected individuals, Department of Health and Human Services, and the media, as applicable, of any Breach of unsecured PHI that compromises the security or privacy of the PHI. All suspected Breaches will be investigated, and all necessary notifications will be sent, in accordance with Grand View’s policy. Examples of unsecured PHI include but are not limited to:
- Medical record left unattended in a public location (e.g., cafeteria or office waiting room);
- Misdirected e-mail to an external group that includes a listing of patients’ accounts that have addresses, social security numbers, dates of birth, or medical diagnoses; and
- Intentional and non-work related access by a Grand View Urgent Care’s workforce member or its business associate of your PHI.
- “Breach” means the unauthorized acquisition, access, use, or disclosure of PHI in a manner not permitted under the Privacy Rule which compromises the security or privacy of the PHI, except where an unauthorized person to whom such information is disclosed would not reasonably have been able to retain such information.
- Grand View will notify affected individuals, Department of Health and Human Services, and the media, as applicable, of any Breach of unsecured PHI that compromises the security or privacy of the PHI. All suspected Breaches will be investigated, and all necessary notifications will be sent, in accordance with Grand View’s policy. Examples of unsecured PHI include but are not limited to:
-
Uses And Disclosures That Require Grand View To Give You An Opportunity To Object And Opt-out
- Individuals Involved in Your Care or Payment for Your Care. Unless you object, Grand View Urgent Care may disclose to a member of your family, a relative, a close friend or any other person you identify, your PHI that directly relates to that person’s involvement in your health care. If you are unable to agree or object to such a disclosure, Grand View Urgent Care may disclose such information as necessary if it determines that it is in your best interest based on their professional judgment.
- Disaster Relief. Grand View Urgent Care may disclose your PHI to disaster relief organizations that seek your PHI to coordinate your care, or notify family and friends of your location or condition in a disaster. Grand View Urgent Care will provide you with an opportunity to agree or object to such a disclosure whenever it practically can do so.
-
Uses And Disclosures That Require Your Written Authorization
- The following uses and disclosures of your PHI will be made only with your written authorization:
- Uses and disclosures of PHI for marketing purposes; and
- Disclosures that constitute a sale of your PHI
- Other uses and disclosures of PHI not covered by this Notice or the laws that apply to Grand View Urgent Care will be made only with your written authorization. If you do give Grand View Urgent Care an authorization, you may revoke it at any time by submitting a written revocation to its Privacy Officer and Grand View Urgent Care will no longer disclose PHI under the authorization. But disclosure that Grand View Urgent Care made in reliance on your authorization before you revoked it will not be affected by the revocation.
- In addition, to the extent Grand View Urgent Care maintains any mental health records, alcohol and drug abuse treatment records and HIV related information; most uses and disclosures of those notes require your written authorization. Mental health records are private notes of a mental health professional kept separately from your medical records. Generally we may not disclose such information unless you consent in writing, the disclosure is allowed by a court order or in limited and regulated other circumstances.
- The following uses and disclosures of your PHI will be made only with your written authorization:
-
Your Rights Regarding Your Protected Health Information
- You have several rights with regard to the PHI that Grand View Urgent Care maintains about you. If you wish to exercise any of the following rights, please contact the Grand View Health Privacy Officer, 700 Lawn Avenue, Sellersville, PA 18960; Phone # 215-453-4000.
- Right to Request Restrictions. You have the right to request restrictions or limitations on Grand View Urgent Care’s uses or disclosures of PHI about you for treatment, payment or health care operations. You also have the right to request a limit on your PHI that we disclose to someone involved in your care or the payment for your care, like a family member or friend. For example, you could ask that Grand View Urgent Care not share information about a particular diagnosis or treatment with your spouse. Grand View Urgent Care is not required to agree to your request unless you are asking it to restrict the use and disclosure of your PHI to a health plan for payment or health care operation purposes and such information you wish to restrict pertains solely to a health care item or service for which you have paid Grand View Urgent Care “out-of-pocket” in full. If Grand View Urgent Care does agree, it will comply with your request unless the information is needed to provide you emergency treatment. A request for restrictions must be in writing, directed to the Grand View Health Privacy Officer listed in this notice, and should include (1) the name and address of where services were received; (2) what information you want to limit; (3) whether you want to limit its use, disclosure or both; and (4) to whom you want the limits to apply.
- Right to Request Confidential Communications. You have the right to request that Grand View Urgent Care communicate with you about medical matters through specific channels, that is, in a certain way or at a certain location. For example, you can ask that Grand View Urgent Care only contact you at work, or only at home, or only by mail. To request confidential communications, you must make a request in writing to Grand View Health/Health Information Management Department at the address in the first sentence of Section VI above, and your request must specifically and clearly state how or where you want to be contacted. Grand View will not ask you the reason for your request, and will attempt to accommodate all reasonable requests.
- Right to Access. You have the right to inspect and copy a designated set of your medical records. This designated set typically includes medical and billing records, but may not include psychotherapy notes. Please note that a request to inspect your medical records means that you may examine them at a mutually convenient time or place. If you request a copy of the information, your request must be in writing and must be submitted to Grand View Health / Health Information Management Department at the address in the first sentence of Section VI above. Grand View Health will in good faith respond in a timely manner to provide patients access to their PHI. Grand View may charge a reasonable fee for the costs of copying, mailing or other supplies associated with your request. Grand View may deny your request to inspect and copy in certain circumstances. If you are denied access to your medical records, you may have the denial reviewed by a licensed health care professional chosen by Grand View. The person conducting the review will not be the person who denied your request. Grand View will comply with the outcome of the review. GVH will not knowingly or willfully take action to limit or restrict the compatibility or interoperability of EPHI. You may also access much of your health information by using the patient portal.
- Right to an Electronic Copy of Electronic Medical Records. If your PHI is maintained in an electronic format (known as an electronic medical record or an electronic health record), you have the right to request that an electronic copy of your record be given to you or transmitted to another individual or entity. Grand View will make every effort to provide access to your PHI in the form or format you requested, if it is readily producible in such form or format. If the PHI is not readily producible in the form or format you request your record will be provided in either its standard electronic format or if you do not want this form or format, a readable hard copy form. Grand View may charge you a reasonable, cost-based fee for the labor associated with transmitting the electronic medical record.
- Right to Amend. If, in your opinion, your medical records are incorrect or incomplete, you may request that Grand View amend your records. You have the right to request an amendment for as long as the information is kept by or for Grand View. A request to amend your medical records must give the reasons for the amendment. Grand View may deny your request for an amendment if it is not in writing or does not include a reason. Grand View may also deny your request for amendment if it covers medical records that:
- were not created by Grand View Urgent Care, unless the person who actually created the information is no longer available to make the amendment;
- are not part of the medical records kept by or for Grand View Urgent Care;
- are not part of the information which you would be permitted to inspect and copy, as discussed above; or
- are accurate and complete.
- Right to an Accounting of Disclosures. You have the right to request an accounting of certain disclosures of PHI by Grand View. A request for accounting of disclosures must specify a time period, which may not be longer than six years, and which may not include dates of service before April 14, 2003. A request for accounting of disclosures must be in writing and must be submitted to the Grand View Health / Health Information Management Department at the address in the first sentence of Section VI above. Your written request should indicate in what form you want the disclosure (for example, on paper). The first accounting within a 12-month period will be free; for additional accountings, Grand View may charge for its costs after notifying you of the cost involved and giving you the opportunity to withdraw or modify your request before any costs are incurred.
- Right to Complain. If you believe your privacy rights have been violated, you may file a complaint with Grand View and/or with the federal Department of Health and Human Services (DHHS). A patient can send a letter to DHHS at:
Office for Civil Rights
U.S. Department of Health and Human Services
150 S. Independence Mall West
Suite 372, Public Ledger Building
Philadelphia, PA 19106-9111 - Grand View Urgent Care cannot require you to waive your right to complain in order for you to receive treatment at Grand View Urgent Care. To file a complaint with Grand View you must submit your complaint, in writing, to the Grand View Health Privacy Officer, 700 Lawn Avenue, Sellersville, PA 18960. You will not be penalized for filing a complaint. If you have any questions about this notice, please contact the Privacy Officer at 215-453-4000.
- Right to a Paper Copy of this Notice. You have the right to a paper copy of this Notice. You may ask us to give you a copy of this notice at any time. You may also obtain a copy of the current version of Grand View Urgent Care notice of Privacy Practices at our Web site, www.gvhurgentcare.com.
- Right to Breach Notification. You have a right to receive written notification when a Breach of any of your unsecured PHI has occurred. Notification of the Breach will be sent to you without unreasonable delay but no later than 60 days after we discover the Breach.
- Right to Out of Pocket Payments. If you paid out-of-pocket (or in other words, you have requested that we not bill your health plan) in full for a specific item or service, you have the right to ask that your PHI with respect to that item or service not be disclosed to a health plan for purposes of payment or health care operations, and Grand View Urgent Care will honor that request.
- You have several rights with regard to the PHI that Grand View Urgent Care maintains about you. If you wish to exercise any of the following rights, please contact the Grand View Health Privacy Officer, 700 Lawn Avenue, Sellersville, PA 18960; Phone # 215-453-4000.
-
Amendments To This Notice
Grand View Urgent Care reserves the right to amend this Notice at any time. In addition, Grand View Urgent Care is required to amend this Notice as made necessary by changes in the Privacy Rule. Each version of the Notice will have an effective date on the first page. Grand View Urgent Care reserves the right to make the amended Notice effective for PHI at the time the amendment is made, as well as for any PHI that Grand View Urgent Care may receive or create in the future. Grand View Urgent Care will post a copy of the current Notice on the Grand View Health Urgent Care website, www.gvhurgentcare.com as well as in the registration area of Grand View Urgent Care facilities, when substantial changes are made.
-
Grand View’s Duties
Grand View Urgent Care is required by the Privacy Rule to maintain the privacy of your PHI. The Privacy Rule requires that Grand View Urgent Care provide notice of its privacy practices to all of its patients or clients. Grand View Urgent Care’s obligations to maintain your privacy, and the situations and circumstances, in which your PHI may be used or disclosed, are described in more detail in this Notice of its legal duties and privacy practices. Grand View Urgent Care is required to comply with the terms and conditions of this Notice and may not amend this Notice except as set forth above.