NOTICE OF PRIVACY PRACTICES*
HIPAA
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED
AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY
Confidentiality and privacy are the cornerstones of the mental health
professions. Patients have an expectation that their communications
with therapists, and
their treatment records, will generally be kept confidential and will not
be released to others without the written authorization of the patient.
One of the purposes of the Notice of Privacy Practices is to inform
and educate
patients about the fact that there are exceptions to the general rule of
confidentiality. Many of these exceptions have existed for years, and many
of them are the result of laws and regulations being passed by state legislatures
and by the federal government. These laws and regulations are essentially
statements of public policy.
What is “Medical Information”?
The term “medical information” is synonymous with the terms “personal
health information” and “protected health information” for
purposes of this Notice. It essentially means any individually identifiable
health information (either directly or indirectly identifiable), whether
oral or recorded in any form or medium, that is created or received by
a health care provider (me), health plan, or others and relates to the
past,
present, or future physical or mental health or condition of an individual
(you); the provision of health care (e.g., mental health) to an individual
(you); or the past, present, or future payment for the provision of health
care to an individual (you).
I am a mental health care provider. More specifically, I am a Licensed
Marriage and Family Therapist, licensed by the State of Colorado through
the Department
of Regulatory Agencies. I create and maintain treatment records that contain
individually identifiable health information about you. These records are
generally referred to as “medical records” or “mental health
records,” and this notice, among other things, concerns the privacy
and confidentiality of those records and the information contained therein.
Uses and Disclosures Without Your Authorization - For Treatment, Payment,
or Health Care Operations
Federal privacy rules (regulations) allow health care providers (me) who
have a direct treatment relationship with the patient (you) to use or disclose
the patient’s personal health information, without the patient’s
written authorization, to carry out the health care provider’s own
treatment, payment, or health care operations. I may also disclose your
protected health information for the treatment activities of any health
care provider.
This too can be done without your written authorization.
An example of a use or disclosure for treatment purposes: If I decide to
consult with another licensed health care provider about your condition,
I would be permitted to use and disclose your personal health information,
which is otherwise confidential, in order to assist me in the diagnosis
or treatment of your mental health condition.
Disclosures for treatment purposes are not limited to the minimum necessary
standard because physicians and other health care providers need access
to the full record and/or full and complete information in order to provide
quality care. The word “treatment” includes, among other things,
the coordination and management of health care among health care providers
or by a health care provider with a third party, consultations between
health care providers, and referrals of a patient for health care from
one health
care provider to another.
An example of a use or disclosure for payment purposes: If your health
plan requests a copy of your health records, or a portion thereof, in order
to
determine whether or not payment is warranted under the terms of your policy
or contract, I am permitted to use and disclose your personal health information.
An example of a use or disclosure for health care operations purposes:
If your health plan decides to audit my practice in order to review my
competence
and my performance, or to detect possible fraud or abuse, your mental health
records may be used or disclosed for those purposes.
PLEASE NOTE: I, or someone in my practice acting with my authority, may
contact you to provide appointment reminders or information about treatment
alternatives
or other health-related benefits and services that may be of interest to
you. Your prior written authorization is not required for such contact.
Other Uses and Disclosures Without Your Authorization:
I may be required or permitted to disclose your personal health information
(e.g., your mental health records) without your written authorization.
The following circumstances are examples of when such disclosures may or
will
be made:
PLEASE
NOTE: The
above list
is not
an exhaustive
list, but
informs you
of most
circumstances when
disclosures without
your written
authorization may
be made.
Other uses
and disclosures
will generally,
but not
always, be
made only
with your
written authorization,
even though
federal privacy
regulations or
state law
may allow
additional uses
or disclosures
without your
written authorization.
Uses or
disclosures made
with your
written authorization
will be
limited in
scope to
the information
specified in
the authorization
form, which
must identify
the information “in a specific and meaningful fashion.” You
may revoke your written authorization at any time, provided that the revocation
is in writing and except to the extent that I have taken action in reliance
on your written authorization. Your right to revoke an authorization is
also limited if the authorization was obtained as a condition of obtaining
insurance
coverage for you. If Colorado law protects your confidentiality
or privacy
more than the federal “Privacy Rule” does, or if Colorado
law gives you greater rights than the federal rule does with respect to
access
to your records, I will abide by Colorado law. In general, uses or disclosures
by me of your personal health information, without your authorization,
will be limited to the minimum necessary to accomplish the intended purpose
of
the use or disclosure. Similarly, when I request your personal health
information from another health care provider, health plan or health care
clearinghouse,
I will make an effort to limit the information requested to the minimum
necessary to accomplish the intended purpose of the request. As mentioned
above, in
the section dealing with uses or disclosures for treatment purposes,
the “minimum
necessary” standard
does not apply
to disclosures
to or requests
by a health care provider
for treatment
purposes because
health
care providers
need complete
access
to information
in order to
provide
quality care.
Your
Rights Regarding
Protected Health
Information
PLEASE
NOTE: In
order to
avoid confusion
or misunderstanding,
I ask that
if you
wish to
exercise
any
of the
rights enumerated
above, that
you put
your request
in writing
and deliver
or send
the writing
to me. If you
wish to
learn more
detailed
information
about any
of the
above rights,
or their
limitations,
please
let me
know. I
am willing
to discuss
any of
these matters
with you.
As mentioned
elsewhere
in
this document, I am
the Privacy
Officer of
this practice.
My
Duties
I
am
required
by
law
to
maintain
the
privacy
and
confidentiality
of
your
personal
health
information.
This
notice
is
intended
to
let
you
know
of
my
legal
duties,
your
rights,
and
my
privacy
practices
with
respect
to
such
information.
I
am
required
to
abide
by
the
terms
of
the
notice
currently
in
effect.
I
reserve
the
right
to
change
the
terms
of
this
notice
and/or
my
privacy
practices
and
to
make
the
changes
effective
for
all
protected
health
information
that
I
maintain,
even
if
it
was
created
or
received
prior
to
the
effective
date
of
the
notice
revision.
If
I
make
a
revision
to
this
notice,
I
will
make
the
notice
available
at
my
office
upon
request
on
or
after
the
effective
date
of
the
revision
and
I
will
post
the
revised
notice
in
a
clear
and
prominent
location.
As
the
Privacy
Officer
of
this
practice,
I have
a duty
to
develop,
implement
and
adopt
clear
privacy
policies
and
procedures
for
my practice
and
I have
done
so.
I am
the
individual
who
is responsible
for
assuring
that
these
privacy
policies
and
procedures
are
followed
not
only
by me,
but
by
any
employees
that
work
for
me
or that
may
work
for
me
in the
future.
I have
trained
or
will
train
any
employees
that
may
work
for
me so
that
they
understand
my
privacy
policies
and
procedures.
In general,
patient
records,
and
information
about
patients,
are
treated
as confidential
in my
practice
and
are
released
to no
one
without
the
written
authorization
of
the
patient,
except
as
indicated
in
this
notice
or except
as may
be otherwise
permitted
by
law.
Patient
records
are
kept
secured
so that
they
are
not
readily
available
to
those
who
do not
need
them.
Because
I am
the
Contact
Person
of
this
practice,
you
may
complain
to
me
and
to
the
Secretary
of
the
U.S.
Department
of
Health
and
Human
Services
if
you
believe
your
privacy
rights
may
have
been
violated
either
by
me
or
by
those
who
are
employed
by
me.
You
may
file
a
complaint
with
me
by
simply
providing
me
with
a written
statement
that
specifies
the
manner
in
which
you
believe
the
violation
occurred,
the
approximate
date
of
such
occurrence,
and
any
details
that
you
believe
will
be
helpful
to
me.
My
telephone
number
is
970-531-1996.
I will
not
retaliate