HIPAA Notice of Privacy Practices
Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
AM Medical Supply, LLC d/b/a VAXI (“VAXI”) is committed to protecting the privacy of your identifiable health information. This information is known as “protected health information” or “PHI.” PHI includes laboratory test orders and test results as well as invoices for the healthcare services that we are providing to you.
We are required by law to maintain the privacy of your PHI. As part of this requirement, we are giving you this Notice of our legal duties and privacy practices, which is always available upon your request. This Notice describes our legal duties, privacy practices and your patient rights as determined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). As required, we will follow the terms of this Notice (as currently in effect - indicated below) and will notify affected individuals in the event of a breach involving unsecured protected health information. PHI is stored electronically and is subject to electronic disclosure.
How We May Use or Disclose Your Health Information
We use your PHI for treatment, payment, or healthcare operations purposes and for other purposes permitted or required by law. Not every use or disclosure is listed in this Notice, but all of our uses or disclosures of your health information will fall into one of the categories listed below.
We need your written authorization to use or disclose your health information for any purpose not covered by one of the categories below. Subject to compliance with limited exceptions, we will not use or disclose psychotherapy notes, use or disclose your PHI for marketing purposes or sell your PHI, unless you have signed an authorization. You may revoke any authorization you sign at any time. If you revoke your authorization, we will no longer use or disclose your health information for the reasons stated in your authorization except to the extent we have already taken action based on your authorization.
As permissible under the law, we may use and disclose your health information for the following purposes:
VAXI provides laboratory testing for physicians and other healthcare professionals, and we use your information in our testing process. We disclose your health information to authorized healthcare professionals who order tests or need access to your test results for treatment purposes.
Billing and Payment
We will use and disclose your PHI for purposes of billing and payment. For example, we may disclose your PHI to health plans or other payers to determine whether you are enrolled with the payer or eligible for health benefits or to obtain payment for our services. If you are insured under another person’s health insurance policy (for example, parent, spouse, domestic partner or a former spouse), we may also send invoices to the subscriber whose policy covers your health services.
We may use and disclose your PHI for activities necessary to support our healthcare operations, such as performing quality checks on our testing, internal audits, arranging for legal services or developing reference ranges for our tests.
We may provide your PHI to other companies or individuals that need the information to provide services to us. These other entities, known as "business associates," are required to maintain the privacy and security of PHI. For example, we may provide information to companies that assist us with billing of our services. We may also use an outside collection agency to obtain payment when necessary.
As Required by Law
We may use and disclose your PHI as required by law.
Law Enforcement Activities and Legal Proceedings
We may use and disclose your PHI if necessary, to prevent or lessen a serious threat to your health and safety or that of another person. We may also provide PHI to law enforcement officials, for example, in response to a warrant, investigative demand or similar legal process, or for officials to identify or locate a suspect, fugitive, material witness, or missing person. We may also disclose PHI to appropriate agencies if we reasonably believe an individual to be a victim of abuse, neglect or domestic violence.
We may disclose your PHI as required to comply with a court or administrative order. We may disclose your PHI in response to a subpoena, discovery request or other legal process in the course of a judicial or administrative proceeding, but only if efforts have been made to tell you about the request or to obtain an order of protection for the requested information.
We may disclose PHI for research purposes when an Institutional Review Board or privacy board has reviewed the research proposal and established protocols to ensure the privacy of your PHI and determined that the researcher does not need to obtain your authorization prior to using your PHI for research purposes. We may also disclose information about decedents to researchers under certain circumstances.
Other Uses and Disclosures
As permitted by HIPAA, we may disclose your PHI to:
Public Health Authorities
The Food and Drug Administration
Health Oversight Agencies
Military Command Authorities
National Security and Intelligence Organizations
Organ and Tissue Donation Organizations
Coroners, Medical Examiners and Funeral Directors
Workers Compensation Agents
We may also disclose relevant PHI to a family member, friend, or anyone else you designate in order for that person to be involved in your care or payment related to your care. We may also disclose PHI to those assisting in disaster relief efforts so that others can be notified about your condition, status and location.
Note Regarding State Law
For all of the above purposes, when state law is more restrictive than federal law, we are required to follow the more restrictive state law.
Your Patient Rights
Access PHI and Test Results. You or your authorized representative have the right to inspect and copy your PHI. You may request to retrieve your test results using the “Contact Us” information at the end of this Notice.
Correct or Update Your Information. If you believe that there is an error in your PHI, you may request that we update it. However, we may deny the request in some cases (such as if we determine the PHI is accurate). If we deny your request to change your PHI we will provide you with a written explanation of the reason for the denial and additional information regarding further actions that you may take.
Restriction Requests. You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to honor such requests unless the requested restriction involves a disclosure to a health plan and you have paid for the applicable services in full and out of pocket.
Alternate Communications. You may request that we communicate with you about your PHI in a specific means or to an alternative postal mail or email address.
Accounting of Disclosures. You may request a list, or accounting, of certain disclosures of your PHI made by us or our business associates for purposes other than treatment, payment, healthcare operations and certain other activities. The request must be in writing and the accounting will include disclosures made within the prior six years.
Copy of Notice. You have the right to obtain a paper or electronic copy of this Notice upon request.
VAXI is required by law to notify you following the discovery that there has been a breach of your PHI, unless VAXI reasonably determines, after investigating the situation and assessing the risk presented, that there is a low probability that the privacy or security of your PHI has been compromised. You will be notified in a timely fashion, no later than 60 days after discovery of the breach.
Changes to Our Notice
We reserve the right to amend this Notice from time to time. When changes are made, we will promptly post the updated Notice on the VAXI website at govaxi.com.
Questions and Complaints
If you have any questions or comments about this Notice, or if you have any complaints about our privacy practices, please contact us using the contact information provided below. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services. VAXI will not retaliate against you for filing a complaint.
Contact us or update your preferences:
VAXI attn Privacy officer
427 E 17TH STREET, STE F476
COSTA MESA, CA 92627
Effective: April 1, 2020