Patient Resources
Privacy Policy
River Hills Surgery Center's
NOTICE OF PRIVACY PRACTICES
THIS NOTICE, WHICH IS REQUIRED BY FEDERAL AND STATE LAW, DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE READ IT CAREFULLY.
The Health Insurance Portability & Accountability Act of 1996 (“HIPM”) is a federal program that requires that all medical records and other individually identifiable health information used or disclosed by us in any form, whether electronically, on paper, or orally, are kept properly confidential. This Act gives you, the patient, significant new rights to understand and control how your health information is used. HIPAA provides penalties for covered entities that misuse personal health information.
As required by HIPM, we have prepared this summary explanation of how we are required to maintain the privacy of your health information and how we may use and disclose your health information.
PROTECTED HEALTH INFORMATION: While receiving care from our facility, information including your medical history, treatment, and payment for your health care may originate and/or be received by River Hills Surgery Center.
The Privacy Rule protects all “individually identifiable health information” held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper or oral. The Privacy Rule calls this information “protected health information (PHI)” [45 C.F.R.§ 160.103]
“Individually identifiable health information” is information, including demographic data that relates to:
The individual’s past, present or future physical or mental health condition,
The provision of health care to the individual, or
The past, present, or future payment for the provision of health care to the individual
and that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual. [45 C.R.F. § 160.103] Individually identifiable health information includes many common identifiers (e.g., name, address, birth date, Social Security Number).
De-Identified Health Information: There are no restrictions on the use or disclosure of de-identified health information. [45 C.F.R. §§ 164.502(d)(2). 164.514(a) and (b)] De-identified health information neither identifies nor provides a reasonable basis to identify an individual.
PERMITTED USES & DISCLOSURES: A covered entity is permitted, but not required, to use and disclose protected health information, without an individual’s authorization, for the following purposes or situations:
To the Individual (unless required for access or accounting of disclosures); Treatment, Payment, and Heath Care Operations;
Workers’ Compensation; Opportunity to Agree or Object;
Incident to an otherwise permitted use and disclosure; Public Interest and Benefit Activities; and
Limited Data Set for the purposes of research, public health or health care operations.
(45 C.F.R § 164.52(a)(1)]
Workers’ Compensation: Covered entities may disclose PHI as authorized by, and to comply with, workers’ compensation laws and other similar programs providing benefits for work-related injuries or illnesses. (45 C.F.R § 164.512(1)] This applies to work-related injuries that are alleged, under investigation, or compensable.
Generally, your PHI may be used and disclosed by us only with your express written authorization. However, there will be some exceptions to this general rule. Covered entities may rely on professional ethics and best judgments in deciding which of these permissive uses and disclosures to make.
This notice has been provided to you as a summary of how we will use your PHI and contains some of your rights with respect to PHI. If you have any more questions or for more information regarding your PHI, please contact the HIPAA Compliance Officer.
We reserve the right to change the terms of our Notice of Privacy Practices currently in effect. Should we revise this notice River Hills will post an updated copy in our main lobby. You may also request a written copy of our revised Notice of Privacy Practices from our office:
River Hills Surgery Center
3201 SE 37th Street
Grimes, IA 50111
You have recourse if you feel your privacy protections have been violated. You have the right to file a formal, written complaint with us at the address noted above to the attention of: HIPAA Compliance Officer, or with the department of Health and Human Services, Office of Civil Rights, about violations of the provisions of this notice or the policies and procedures of our office. We will not retaliate against you for filing a complaint.
For more information about HIPAA or to file a complaint, contact the US Department of Health and Human Services at OCRComplaint@hhs.gov