HIPAA Notice of Privacy Practices
Effective April 14, 2003 As Amended by HITECH ACT Provisions Effective February 17, 2010
HIPAA Notice of Privacy Practices for Personal Health Information
This Notice of Privacy Practices applies to the Bayonne Medical Center, also known as "Bayonne Hospital Center".
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION
PLEASE REVIEW IT CAREFULLY
If you have any questions about this notice, please call the
Bayonne Medical Center Privacy Officer at 201-858-5260
OUR PLEDGE REGARDING MEDICAL INFORMATION
We understand that medical information about you and your health is personal. With this understanding, please be assured that Bayonne Medical Center is committed to protecting the privacy of your medical information (also known as "protected health information" or "PHI") and all of your privacy rights.
The information concerning your care and treatment at the Medical Center is found in your medical record. We need this record to provide you with quality care and to comply with certain legal requirements.
This Notice applies to all of the records of your care generated by the Medical Center, whether made by Medical Center personnel or your personal doctor.
Your personal doctor may have different policies or notices regarding the doctor's use and disclosure of your medical information created in the doctor's office or clinic.
This Notice will tell you about the ways in which we may use and disclose medical information about you. We also describe your rights and certain obligations we have regarding the use and disclosure of medical information.
We are required by law to:
make sure that medical information that identifies you is kept private and disclose such information only in a manner as permitted by law;
give you this Notice of our legal duties and privacy practices with respect to medical information about you, and
follow the terms of the Notice that are currently in effect.
WAYS IN WHICH WE MAY USE AND DISCLOSE YOUR PROTECTED HEALTH INFORMATION
We will use and disclose your protected health information to provide, coordinate, or manage your heath care and any related services. We will also disclose your health information to other providers who may be treating you. Additionally we may from time to time disclose your health information to another provider who has been requested to be involved in your care.
We will use and disclose your protected health information to obtain payment for the health care services we provide you. For example-we may include information with a bill to a third-party payer that identifies you, your diagnosis, procedures performed, and supplies used in rendering the service.
Health Care Operations
We will use and disclose your protected health information to support the business activities of our hospital. For example-we may use medical information about you to review and evaluate our treatment and services or to evaluate our staff's performance while caring for you. In addition, we may disclose your health information to third party business associates who perform billing, consulting, or transcription, or other services for our facility.
OTHER WAYS WE MAY USE AND DISCLOSE YOUR PROTECTED HEALTH INFORMATION
If we call to remind you of an appointment at our facility, we will only leave the name of the hospital and the time of the appointment. Please let us know if you do NOT wish to be called.
We will use and disclose your protected health information to researchers, provided the research has been approved by an institutional review board that has reviewed the research proposal and established protocols to ensure the privacy of your health information.
Lawsuits and Disputes
If you are involved in a lawsuit or a dispute, we may disclose medical information about you in response to a court or administrative order. We may also disclose medical information about you in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute, but only if the party seeking the information has provided us with satisfactory assurance that you have been given notice of the request and that the party seeking the information has received a protective order to protect the information requested.
We may release medical information if asked to do so by a law enforcement official:
in response to a court order, subpoena, warrant, summons or similar process;
to identify or locate a suspect, fugitive, material witness, or missing person;
about the victim of a crime if, under certain limited circumstances, we are unable to obtain the person's agreement;
about a death we believe may be the result of criminal conduct;
about criminal conduct at the Medical Center; and
in emergency circumstances to report a crime; the location of the crime or victims; or the identity, description or location of the person who committed the crime.
Coroners, Medical Examiners and Funeral Directors
We may release medical information to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also release medical information about patients of the Medical Center to funeral directors as necessary to perform their duties.
To Avert a Serious Threat to Public Health or Safety
We will use and disclose your protected health information to public health authorities permitted to collect or receive the information for the purpose of controlling disease, injury, or disability. If directed by that health authority, we will also disclose your health information to a foreign government agency that is collaborating with the public health authority.
We will use and disclose your protected health information for worker's compensation or similar programs that provide benefits for work-related injuries or illness.
We will use and disclose your protected health information to a correctional institution or law enforcement official only if you are an inmate of that correctional institution or under the custody of the law enforcement official. This information would be necessary for the institution to provide you with health care; to protect the health and safety of others; or for the safety and security of the correctional institution.
Bayonne Medical Center Directory
We may include limited information about you in the Bayonne Medical Center directory while you are a patient at the Medical Center. This information may include your name, location in the Medical Center, your general condition (e.g., fair, stable, etc.) and your religious affiliation. The directory information, except for your religious affiliation, may also be released to people who ask for you by name. Your religious affiliation may be given to a member of the clergy, such as a priest or rabbi, even if they don't ask for you by name. This is so your family, friends and clergy can visit you in the Medical Center and so they will generally know how you are doing. You have the right to request restrictions on this information. (See the section Request Restrictions.)
If you do not object, we may include your name location, and general condition in our facility Patient Directory Used for requests by those who ask for you by name. If you do not object, we also disclose information from the directory and your religious affiliation to clergy who request the same.
Others Involved in Your Care
We may provide relevant portions of your Protected Health Information (PHI) to a family member, a relative, a close friend, or any other person you identify as being involved in your medical care or payment for care. You will be given a password to give to those with whom you wish us to share information. In an emergency or when you are not capable of agreeing or objecting to these disclosures, we will disclose PHI as we determine is in your best interest, but will tell you about it after the emergency, and give you the opportunity to object to future disclosures to family and friends.
USES OR DISCLOSURES NOT COVERED BY THIS NOTICE
Uses or disclosures of your health information not covered by this notice or the laws that apply to us may only be made with your written authorization. You may revoke such authorization in writing at any time and we will no longer disclose health information about you for the reasons stated in your written authorization. Disclosures made in reliance on the authorization prior to the revocation are not affected by the revocation.
Under HITECH, Bayonne Medical Center is required to notify patients whose PHI has been breached. Notification must occur in a timely manner but no more than 60 days from the date of discovery. A breach occurs when an unauthorized use or disclosure that compromises the privacy or security of PHI presents a significant risk for financial, reputational or other type of harm to the individual. The notice must:
(1) Contain a summary of what occurred, including the date of the breach and the date of discovery;
(2) The actions the individual should take to protect themselves from potential harm resulting from the breach;
(3) A short description of what Bayonne Medical Center is doing to investigate the breach, mitigate losses and to protect against future breaches.
Bayonne Medical Center's Business Associate Agreements have been amended per the HITECH law to provide that all HIPAA security safeguards etc. apply directly to the business associate.
PATIENT RIGHTS RELATED TO PROTECTED HEALTH INFORMATION
Although your health record is the physical property of the facility that compiled it, the information belongs to you. You have the right to:
Request an Amendment
You have the right to request that we amend your medical information if you feel that it is incomplete or inaccurate. You must make this request in writing to our Privacy Officer, stating what information is incomplete or inaccurate and the reasoning that supports your request.
We are permitted to deny your request if it is not in writing or does not include a reason to support the request. We may also deny your request if:
the information was not created by us, or the person who created it is no longer available to make the amendment.
the information is not part of the record which you are permitted to inspect and copy.
the information is not part of the designated record set kept by this facility or if it is the opinion of the health care provider that the information is accurate and complete.
You have the right to request a restriction of how we use or disclose your medical information for treatment, payment, or health care operations. For example-you could request that we not disclose information about a prior treatment to a family member or friend who may be involved in your care or payment for care. Your request must be made in writing to the Director of Health Information Management.
We are not required to agree to your request if we feel it is in your best interest to use or disclose that information. If we do agree, we will comply with your request except for emergency treatment.
The HITECH regulation references that if you as a patient pay in full out of pocket for services received you can request that the information regarding the services not be disclosed to any third party since no claim is being made against a third party payer.
Inspect and Copy
You have the right to inspect and copy the protected health information that we maintain about you in our designated record set for as long as we maintain that information. This designated record set includes your medical and billing records, as well as any other records we use for making decisions about you. Any psychotherapy notes that may have been included in records we received about you are not available for your inspection or copying, by law. We may charge you a fee for the costs of copying, mailing, or other supplies used in fulfilling your request.
If you wish to inspect or copy your medical information, you must submit your request in writing to our Privacy Officer: Attention: Privacy Officer, Bayonne Medical Center, 29 East 29th Street, Bayonne, NJ 07002. Phone: 1-877-837-4437. You may mail your request or bring it to the Health Information Management office. We will have 30 days to respond to your request for information that we maintain at our facility. If the information is stored off-site, we are allowed up to 60 days to respond but must inform you of this delay.
Under the HITECH regulation, you have the right to access your own e-health record in an electronic format and to direct Bayonne Medical Center to transmit the electronic record to a third party. When this electronic transfer occurs, the hospital can only charge for the labor involved.
An Accounting of Disclosures
You have the right to request a list of the disclosures of your health information we have made outside of facility that were not for treatment, payment, or health care operations. Your request must be in writing and must state the time period for the requested information. You may not request information for any dates prior to April 14, 2003, nor for a period of time greater than six years (our legal obligation to retain information).
Your first request for a list of disclosures within a 12-month period will be free. If you request an additional list within 12-months of the first request, we may charge you a fee for the costs of providing the subsequent list. We will notify you of such costs and afford you the opportunity to withdraw your request before any costs are incurred.
Request Confidential Communications
You have the right to request how we communicate with you to preserve your privacy. For example-you may request that we call you only at your work number, or by mail at a special address or postal box. Your request must be made in writing and must specify how or where we are to contact you. We will accommodate all reasonable requests.
File a Complaint
If you believe we have violated your medical information privacy rights, you have the right to file a complaint with our facility or directly to the Secretary of the United State Department of Health and Human Services: U.S. Department of Health & Human Services, 200 Independence Avenue, S.W., Washington, D.C. 20201. Phone: 202-619-0257 Toll Free.
To file a complaint with our facility, you must make it in writing within 180 days of the suspected violation. Provide as much detail as you can about the suspected violation and send it to our Privacy Officer at Bayonne Medical Center, 29th Street at Avenue E, Bayonne, N. J. 07002.
A Paper Copy of This Notice
You have the right to receive a paper copy of this notice upon request. You may obtain a copy by asking for it.
CHANGES TO THIS NOTICE
We have the right to change this notice. We reserve the right to make the revised or changed notice effective for medical information we already have about you as well as any information we receive in the future. We will post a copy of the current notice in the Medical Center on our website www.bayonnemedicalcenter.org. Any changes to the notice will be posted promptly on the website.