Privacy Policy
Notice of Privacy Practices
The Spine Institute of Kentucky
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
We understand the importance of privacy and are committed to maintaining the confidentiality of your medical information. We make a record of the medical care we provide and may receive such records from others. We use these records to provide or enable other healthcare providers to deliver quality medical care, obtain payment for services as allowed by your health plan, and meet our professional and legal obligations. We are required by law to maintain the privacy of protected health information and provide individuals with notice of our legal duties and privacy practices. This notice outlines how we may use and disclose your medical information and describes your rights and our legal obligations. If you have any questions about this notice, please contact our Privacy Officer.
A. How This Medical Practice May Use or Disclose Health Information
This medical practice collects identifiable patient information, such as medical, billing, claims, referral, and health plan information, and stores it in charts, administrative files, or on a computer. The medical record is the property of this medical practice, but the information in the medical record is accessible to the patient. This information is considered "protected health information" (PHI) under HIPAA. The law permits us to use or disclose health information for the following purposes without the patient's written authorization:
1. Treatment
We use medical information to provide medical care and share it with our employees and others involved in patient care. For instance, we may share medical information with other physicians, health care providers, pharmacists, or labs.
2. Payment
We use and disclose PHI to obtain payment for our services. For example, we provide health plans with information for payment purposes. We may also share information with other health care providers for payment-related purposes.
3. Health Care Operations
We use and disclose PHI to manage this medical practice, such as reviewing care quality, staff qualifications, and health plan authorizations. We may share PHI with "business associates" who perform administrative tasks, and they must protect this PHI's confidentiality. We may also share PHI with health care providers or plans that have a relationship with our patients for quality and safety activities, case management, accreditation, and other related purposes.
4. Appointment Reminders
We may use or disclose medical information to contact patients about appointments. If unavailable, we may leave a message.
5. Sign-In Sheet
We may use and disclose medical information when patients sign in at our office or call out their names when ready.
6. Notification and Communication with Family
We may disclose health information to notify a family member or personal representative about a patient’s location, condition, or in the event of a patient’s death. In disasters, we may disclose information to relief organizations. We may also disclose information to someone involved in a patient's care or payment if they agree or if it’s necessary during emergencies.
7. Marketing
We may contact patients to encourage treatment-related products or services, provided we don’t receive payment for such communications. If financial compensation is received, or in cases related to certain conditions, we will notify the patient and allow an opt-out option. We will not use or disclose PHI for marketing or accept payment for marketing without the patient’s authorization.
8. Sale of Health Information
We will not sell PHI without prior written authorization. The authorization will disclose compensation details, and the patient can revoke it.
9. Required by Law
We will use and disclose health information as required by law, reporting abuse or complying with legal proceedings.
10. Public Health
We may disclose PHI to public health authorities for disease control, abuse reporting, and FDA reporting.
11. Health Oversight Activities
We may disclose PHI to oversight agencies during audits, investigations, or licensure proceedings.
12. Judicial and Administrative Proceedings
We may disclose PHI as authorized by a court order or in response to legal processes, with appropriate notice to the patient.
13. Law Enforcement
We may disclose PHI for law enforcement purposes as required by law, such as identifying suspects or complying with court orders.
14. Coroners
We may disclose PHI to coroners for death investigations.
15. Organ or Tissue Donation
We may disclose PHI to organizations involved in organ or tissue donation.
16. Public Safety
We may disclose PHI to prevent or lessen threats to health or safety.
17. Proof of Immunization
We will provide proof of immunization to schools as required, with patient consent.
18. Specialized Government Functions
We may disclose PHI for military, national security, or correctional purposes.
19. Workers' Compensation
We may disclose PHI to comply with workers' compensation laws.
20. Change of Ownership
If this medical practice is sold or merged, patient records will transfer to the new owner, who must maintain confidentiality.
21. Breach Notification
We will notify patients of any PHI breach, using email or other methods as appropriate.
22. Other Disclosures
We may disclose PHI as outlined in our Notice of Privacy Practices.
B. When This Medical Practice May Not Use or Disclose Health Information
We will not use or disclose PHI without written authorization, except as described. Patients may revoke authorization in writing.
C. Patients' Health Information Rights
1. Right to Request Privacy Protections
Patients may request restrictions on PHI use or disclosure. We will comply if reasonable, but reserve the right to accept or reject requests.
2. Right to Request Confidential Communications
Patients may request specific communication methods or locations. We will accommodate reasonable requests.
3. Right to Inspect and Copy
Patients can inspect or obtain copies of PHI by written request, subject to fees and limited exceptions.
4. Right to Amend
Patients may request amendments to PHI if inaccurate. Requests must be in writing, and denials can be appealed.
5. Right to an Accounting of Disclosures
Patients may request an accounting of PHI disclosures, excluding certain exceptions.
6. Right to a Paper Copy
Patients have the right to a paper copy of this notice, even if received electronically.
Changes to This Notice
We reserve the right to amend this notice. The revised notice will apply to all PHI. Current notices will be posted in our reception area.
Complaints
For complaints, contact:
Privacy Officer
1623 S Preston St, Suite 100, Louisville, KY 40217
Ph: 502-413-5777 | Fax: 502-413-5766
If unsatisfied, patients may contact:
Office for Civil Rights
U.S. Department of Health & Human Services
1500 Leestown Rd # 322, Lexington, KY 40511