Wellstar Joint Notice of Privacy Practices

Notice of Privacy Practices

We are required by law to protect the privacy of your health information. We are also required to provide you with this notice, which explains how we may use information about you and when we can give out or "disclose" that information to others. You also have rights regarding your health information that are described in this notice. We are required by law to abide by the terms of this notice.

The terms "information" and "health information" in this notice include any information that we maintain that reasonably can be used to identify you and that relates to your physical or mental health condition, the provision of health care to you, or the payment for your health care.

We have the right to change our privacy practices and the terms of this notice. If we make a material change to our privacy practices, we will provide you with a revised notice at your first visit after the revision or electronically as permitted by applicable law. In all cases, we will post the revised notice on our website. We reserve the right to make any revised notice effective for information we already have and for information that we receive in the future.

This Notice of Privacy Practices describes the practices of all Wellstar entities and of Wellstar’s workforce members, students and volunteers working in its hospitals, clinics, doctors’ offices and service departments. This notice also describes the privacy practices of affiliated providers—who are not employees of Wellstar—while treating you in a Wellstar facility, unless they provide you with a notice of their own privacy practices.

How we use and disclose information

We must use and disclose your health information to provide that information:

• To you or someone who has the legal right to act for you (your personal representative) in order to administer your rights as described in this notice; and
• To the Secretary of the Department of Health and Human Services, if necessary, to make sure your privacy is protected.

We have the right to use and disclose health information for your treatment, to obtain payment for your health care services and to operate our business. For example, we may use or disclose your health information:

• For Treatment. We may use or disclose health information to better understand your health condition for your treatment. For example, we may look at your x‐rays or share x‐rays we take of you with your treating physician, who may be outside of Wellstar, or we may receive your prescription information from other health services companies to help you avoid harmful drug interactions.
• For Payment. We may use or disclose health information to bill for your healthcare services and to receive payment for those services. For example, we share with and receive health information from your health insurance company and/or other health care providers to receive payment and to better manage your care.
• For Health Care Operations. We may use or disclose health information as necessary to operate and manage our business activities related to providing and managing your healthcare. For example, we might talk to your physician to suggest a disease management or wellness program that could help improve your health or we may analyze data to determine how we can improve our services.
• To Provide You Information on Health Related Programs or Products such as alternative medical treatments and programs or about health‐related products and services, subject to limits imposed by law.
• For Reminders. We may use or disclose health information to send you reminders about your benefits or care, such as appointment reminders with providers who provide medical care to you.

We may use or disclose your health information for the following purposes under limited circumstances:

• As required by Law. We may disclose information when required to do so by law.
• To Persons Involved With Your Care. We may disclose your health information to a person involved in your care or who helps pay for your care, if you agree to the disclosure or if you fail to object when given the opportunity. For example, we may disclose information to a family member or friend when you are incapacitated or in an emergency situation. If you are unavailable or unable to object, we will use our best judgment to decide if the disclosure is in your best interests.
• For Public Health Activities such as reporting or preventing disease outbreaks.
• For Reporting Victims of Abuse, Neglect or Domestic Violence to government authorities that are authorized by law to receive such information, including a social service or protective service agency.
• For Health Oversight Activities to a health oversight agency for activities authorized by law, such as licensure, governmental audits and fraud and abuse investigations.
• For Judicial or Administrative Proceedings such as in response to a court order, search warrant, or subpoena.
• For Law Enforcement Purposes. We may disclose your health information to a law enforcement official for purposes such as providing limited information to locate a missing person or report a crime.
• To Avoid a Serious Threat to Health or Safety to you, another person, or the public, by, for example, disclosing information to public health agencies or law enforcement authorities, or in the event of an emergency or natural disaster.
• For Specialized Government Functions such as military and veteran activities, national security and intelligence activities, and the protective services for the President and others.
• For Workers’ Compensation as authorized by, or to the extent necessary to comply with, state workers compensation laws that govern job‐related injuries or illness.
• For Research Purposes such as research related to the evaluation of certain treatments or the prevention of disease or disability, if the research study meets privacy law requirements.
• To Request Your Support for improving health care services that we provide to our community by contributing to Wellstar’s charitable foundation. (If you don’t want to be contacted for this purpose, call the Wellstar Foundation at (770) 956-6670 or email us to let us know.)
• To Provide Information Regarding Decedents. We may disclose information to a coroner or medical examiner to identify a deceased person, determine a cause of death, or as authorized by law. We may also disclose information to funeral directors as necessary to carry out their duties.
• For Organ Procurement Purposes. We may use or disclose information to entities that handle procurement, banking or transportation of organs, eyes or tissue to facilitate donation and transplantation.
• To Correctional Institutions or Law Enforcement Officials if you are an inmate of a correctional institution or under the custody of a law enforcement official, to ensure the safety of the correctional institution and law enforcement officials.
• To Business Associates that perform certain specialized services on our behalf. Our business associates are required, under contract with us, to protect the privacy of your information and are not allowed to use or disclose any information other than as specified in our contract.
• For Data Breach Notification Purposes. We may use your contact information to provide legally required notices of unauthorized acquisition, access, or disclosure of your health information.
• Special Legal Protections for Certain Health Information. Wellstar complies with federal laws that require extra protection for your health information if you receive treatment in an addiction treatment program, or from a psychotherapist who keeps notes on your therapy that are kept outside of your regular medical record.

Uses with your authorization

Any sharing of your health information, other than as explained above, requires your written authorization. For example, we will not use your health information unless you authorize us in writing to:

• Share any of your psychotherapy notes, if they exist, with a third party;
• Share any of your health information with marketing companies; or
• Sell any of your health information.

Except for uses and disclosures described and limited as set forth in this notice, we will use and disclose your health information only with a written authorization from you. Once you give us authorization to release your health information, we cannot guarantee that the person to whom the information is provided will not disclose the information. You may take back or “revoke” your written authorization at any time, in writing, except if we have already acted based on your prior authorization.

What are your rights

The following are your rights with respect to your health information:

• You have the right to review and obtain a copy of your medical or billing records as allowed by law. You have the right to obtain a copy of these records in an electronic format if we maintain the information in an electronic format. To obtain a copy of your records in either paper or electronic format, you must make the request in writing. We will respond to your request within 30 days of your request and we may charge you a fee to cover the copying, mailing or other related costs. We may deny your request to inspect and copy in certain very limited circumstances. If you are denied access to medical information, you may request that the denial be reviewed or you may submit a written complaint. If you request a review, another licensed healthcare professional, chosen by Wellstar, will review your request and the denial. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.
• You have the right to request certain restrictions on our uses or disclosures of your medical information for treatment, payment or healthcare operations except when authorized by you, when required by law, or in an emergency. You may also request a restriction on our disclosure of your medical information to someone who is involved in your care or payment, like a family member or friend. We are not legally required to agree to your request. All requests for restrictions must be made in writing. We will inform you of our decision.
• You have the right to request that we not share certain information with your health plan, if you pay in full, out of pocket, for those healthcare items or services (to ensure that we don’t automatically bill your health plan for these services or items, you will need to notify Wellstar’s staff before receiving these services or items if you want this restriction).
• You have the right to request confidential communications at a specific address or phone number.
• You have the right to request an amendment to information we maintain about you if you believe the health information about you is wrong or incomplete. Your request must be in writing and provide the reasons for the requested amendment. If we deny your request, you may have a statement of your disagreement added to your health information.
• You have a right to receive an accounting, as specified by law, of certain circumstances when your information is disclosed without your authorization.
• You have the right to a paper copy of this notice. You may ask for a copy of this notice at any time. Even if you have agreed to receive this notice electronically, you are still entitled to a paper copy of this notice. You may also obtain print a PDF version of this notice.
• You have the right to report a privacy concern. We will investigate all privacy complaints and concerns. We will not penalize or treat you any differently for filing a complaint. You may also file a written complaint with the Office for Civil Rights of the US Department of Health and Human Services.