The following categories describe different ways that we may use and disclose medical information without your authorization, unless authorization is otherwise required by state law We will make certain disclosures of your PHI as and when required or otherwise authorized by law, and in these instances we will limit the use or disclosure to the amount of PHI necessary to comply with and/or serve the purposes of the relevant federal, state, or local laws or ordinances, or the legitimate needs of responsible, authorized agencies in fulfilling their purposes. For each category of uses or disclosures we will describe the permitted use of your information and present some examples. Not every use or disclosure in a category will be listed.
At Your Request. We may disclose information when requested by you. This disclosure at your request may require your written authorization.
For Treatment. We may use your medical information to provide you with medical treatment or services. We may disclose medical information about you to doctors, nurses, technicians, or other health care professionals who are involved in your care. Other health care professionals may also share medical information about you in order to coordinate and manage your treatment. We also may disclose medical information about you to authorized individuals and/or entities outside of Implantable Provider Group, Inc. who may be involved in your medical care. For example, we may discuss your PHI with your surgeon to determine the correct type and size of implantable device for you.
For Payment. We may use and disclose medical information about you to determine your insurance benefits, to submit charges to you or your insurance company for the care and services you receive, and to facilitate payment for the services provided to you. For example, your insurance company may need to know about the surgery you received in order to provide payment for the surgery. We may also use and disclose medical information about you to obtain prior approval or to determine whether your insurance will cover the treatment.
For Health Care Operations. We may use and disclose medical information about you for other health care operations. Health care operations include all of the functions of Implantable Provider Group, Inc. necessary to run the company and to provide services to you. For example, we may use medical information in connection with quality assurance review and improvement activities. As another example, we may share your PHI with individuals in patient relations to resolve any complaints that you may have and to ensure patient satisfaction.
Business Associates. We may disclose your PHI to our Business Associates to carry out treatment, payment or health care operations. For example, we may disclose medical information about you to a company who bills insurance companies on our behalf to enable that company to help us obtain payment for services we provide.
De-Identified Data and Limited Data Sets. We may use or disclose your medical information to create de-identified information or to create Limited Data Sets of PHI. Under the HIPAA Privacy rule the method that may be used for de-identification conforms to Sections 164.514(b) and(c) of the Privacy Rule contain the implementation specifications that we follow to meet the de-identification standard.
To Avert a Serious Threat to Health or Safety. We may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or to the health and safety of the general public. Any disclosure would only be to someone able to help prevent the threat.
Public Health Risks. We may disclose medical information about you for public health activities. These activities generally include the following:
- to prevent or control disease, injury or disability;
- to report child abuse or neglect;
- to report reactions to medications or problems with products;
- to notify people of recalls of products they may be using;
- to notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition; and
- to notify the appropriate government authority if we believe a patient has been the victim of abuse, neglect or domestic violence.
Health Oversight Activities. We may disclose medical information to a health oversight agency for activities authorized by law. These oversight activities include, for example, audits, investigations, inspections, and licensure. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws.
Judicial or Administrative Proceedings. We may share your PHI in the course of a legal proceeding before a court or administrative tribunal in response to a legal request or order. For example, we may disclose your PHI in response to a Judge’s Order for certain health information about you. We may also disclose medical information about you in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute, but only if efforts have been made to tell you about the request (which may include written notice to you) or to obtain an order protecting the information requested.
Law Enforcement Purposes. We may share your PHI with the police or other law enforcement officials as required or permitted by law. For example, we may disclose medical information about you to comply with laws that require the reporting of certain kinds of wounds or other physical injuries.
Military and Veterans. If you are a member of the armed forces, we may release medical information about you as required by military command authorities. We may also release medical information about foreign military personnel to the appropriate foreign military authority.
Decedents. We may share PHI with a coroner or medical examiner as authorized by law.
Organ and Tissue Procurement. If you are an organ donor, we may release medical information about you to organizations that handle organ procurement.
Research. We may use and disclose your PHI for research purposes in certain limited circumstances. We must obtain your written authorization to use your PHI for research purposes except when our use or disclosure was approved by an Institutional Review Board or a Privacy Board, to ensure the privacy of your PHI.
Workers’ Compensation. We may share your PHI as permitted or required by state law relating to workers’ compensation claims.
National Security. We may release medical information about you to authorized federal officials for national security and intelligence activities.
Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release medical information about you to the correctional institution or law enforcement official. This release would be necessary (1) for the institution to provide you with health care; (2) to protect your health and safety or the health and safety of others; or (3) for the safety and security of the correctional institution.
As Otherwise Required By Law. We may use and disclose your PHI when required to do so by any other federal, state or local law not specifically referenced above. For example, we are required to disclose PHI to the Secretary of the United States Department of Health and Human Services when requested by the Secretary to review our compliance with HIPAA.