NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW YOUR Part 2 MEDICAL INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
The INTEGRIS Arcadia Trails Center for Addiction Recovery (hereafter referred to as " Arcadia Trails ") is required to maintain the privacy of your protected health information and to provide you with a notice of our privacy practices.
Protected health information (hereafter referred to as "PHI") is information that individually identifies you and pertains to your past, present, or future health status, including your receipt of treatment at Arcadia Trails.
To promote quality of care, Arcadia Trails maintains an electronic health record ("EHR"). The privacy obligations of Arcadia Trails apply to information stored in your EHR. Arcadia Trails and the individual members of its professional staffs are providing you with a joint Notice with respect to services provided by Arcadia Trails. Please note that the independent members of the professional staffs are neither employees nor agents of Arcadia Trails but are joined under this Notice for the convenience of explaining how, when, and why we use and disclose your PHI.
We will not use or disclose your PHI except as described in this Notice. In certain situations, we must obtain your written authorization to use and/or disclose your PHI. With some exceptions, we may not use or disclose any more of your PHI than is necessary to accomplish the purpose of the use or disclosure. This Notice applies to all PHI generated or maintained by Arcadia Trails.
General Non-Disclosure:
Except as provided herein, or as otherwise required by law, PHI may not be disclosed outside of Arcadia Trails workforce without a written authorization from you that complies with federal and state law. This General Non-Disclosure Rule means that your written authorization is required to:
• Acknowledge to anyone outside of Arcadia Trails that you applied for or received treatment at Arcadia Trails. This applies even if someone claims to have knowledge of your treatment from another source.
• Disclose any PHI to anyone outside Arcadia Trails regardless of that person’s relationship to the patient, except under certain situations allowed by law.
• Disclose PHI for fundraising, marketing, or research except to the extent specified in the Privacy Policies.
TREATMENT, PAYMENT & HEALTH CARE OPERATIONS: When you voluntarily agree to treatment at Arcadia Trails, we do not need further authorization from you to treat you and conduct our "health care operations" as discussed below.
Treatment: We may use your PHI to provide you with treatment and services. We may disclose your PHI to physicians, nurses, therapists, technicians, medical students, and other health care personnel who need to know your PHI for your care and continued treatment at Arcadia Trails. We may share your PHI to coordinate services, such as prescriptions, lab work, x-rays and other services. For example, your physician may need to tell the dietitian if you have diabetes so we can arrange appropriate meals. We may use and disclose your PHI to tell you about or arrange for possible treatment options for your continued care after you leave Arcadia Trails.
Payment: If you elect to file insurance, we may use and disclose your PHI for determining coverage, billing, collections, claims management, medical data processing, and reimbursement. PHI may be released to an insurance company, third party payer or other entity (or their authorized representatives) involved in the payment of your bill and may include copies or excerpts of your medical record that are necessary for payment of your account. For example, a bill sent to a third party payer may include information identifying you and your diagnosis. We may also tell your health plan about treatment you are going to receive in order to obtain prior approval or determine whether your plan will cover the treatment. We may make your PHI available electronically through a secure state, regional or national exchange service to other health care providers, health plans and health care clearinghouses that request your information for payment for that treatment.
Health Care Operations: We may use and disclose your PHI during health care operations. These uses and disclosures are necessary to run Arcadia Trails and make sure our patients receive quality care. Common examples include conducting quality assurance, performance improvement, utilization review, medical review, peer review, internal auditing, investigation of complaints, accreditation, certification, licensing, credentialing, medical research, training and education. For example, we may use your PHI to contact you to conduct patient satisfaction services or we may disclose your PHI to a pharmaceutical company in assessing your eligibility for pharmaceutical assistance programs.
OTHER USES AND DISCLOSURES:
Emergencies: Your authorization is not required if you need emergency treatment; i.e., there is a situation that poses an immediate threat to the health of any individual and requires immediate medical intervention. We will try to get your authorization as soon as practical after the emergency.
Health Information Exchange: We may participate in a secure state, regional or national health information exchange ("HIE"). Generally, an HIE is an organization in which providers exchange patient information to facilitate health care, avoid duplication of services (such as tests) and to reduce the likelihood that medical error will occur. By participating in a HIE, and upon your authorization, we may share your PHI with other treating providers that participate in the HIE or participants of other health information exchanges. If you do not want your medical information to be available through the HIE, you must request a restriction using the process outlined below.
Qualified Service Organizations: We may disclose your PHI to Qualified Service Organizations with whom we contract to provide services on our behalf. Examples include copy services used to copy medical records, consultants, accountants, lawyers, medical transcriptionists and third-party billing companies. We will only make these disclosures if we have received satisfactory assurance that the qualified service organization will properly safeguard your PHI. Each qualified service organization is required to receive satisfactory assurances from its subcontractors that they will likewise properly safeguard your PHI.
Research: Under certain circumstances, we may use and disclose your PHI to researchers whose clinical research studies have been approved by an Institutional Review Board ("IRB"). While most clinical research studies require patient consent, there are some instances where your PHI may be used or disclosed pursuant to IRB waiver or as required or permitted by law. For example, a research project may involve comparing the health and recovery of all patients with the same medical condition who received one medication to those who received another. PHI may be disclosed to researchers preparing to conduct a research study, for example, to help them look for patients with specific medical needs, so long as the PHI they review does not leave Arcadia Trails. PHI regarding people who have died may be disclosed without authorization in certain circumstances.
Limited Data Set: If we use your PHI to make a "limited data set," we may give the "limited data set" that includes your information to others for the purposes of research, public health action or health care operations. We must make reasonable efforts to limit use, disclosure of, and requests for PHI to the to accomplish the intended purpose of the use, disclosure or request. The persons who receive "limited data sets" are required to agree to take reasonable steps to protect the privacy of your medical information.
Limited Marketing Purposes: We must obtain your authorization for any use or disclosure of PHI for marketing. With some exceptions, marketing includes any type of communication for treatment and health care operations when Arcadia Trails is paid to provide the communication. If we receive any form of payment for a marketing communication, we must obtain your authorization and tell you that payment is involved. Marketing does not include communications pertaining to (i) refill reminders so long as any payment received is limited to the cost of making the communication; (ii) case management; (iii) care coordination; (iv) communications that merely promote health in general; and (v) communications to you concerning health-related products, benefits or services related to your treatment or alternative treatments, therapies, providers or care settings.
Data Breach Notification Purposes: We may use or disclose your Protected Health Information to provide legally required notices of unauthorized access to or disclosure of your health information.
Regulatory Agencies: We may disclose your PHI to a health oversight agency for activities required or permitted by law, including, but not limited to, licensure, certification, audits, investigations, inspections and medical device reporting. We may provide your PHI to assist the government when it investigates or inspects a health care provider or organization.
Law Enforcement: We may disclose your PHI if asked to do so by law enforcement: (1) when we receive a court order, warrant, summons or other similar process; (2) an immediate threat to the health or safety of an individual exists due to a crime on Arcadia Trails premises or against Arcadia Trails personnel; and (3) in emergency circumstances to report a crime, including the suspect’s name, address, last known whereabouts, and status as a patient in the program.
Lawsuits and Disputes: If you are involved in a lawsuit or dispute, we may disclose your PHI in response to a valid court or administrative order. In a civil case, the court order authorizing a disclosure must include measures necessary to limit disclosure for your protection, which could include sealing from public scrutiny the record of any proceeding for which disclosure of your record has been ordered. In a criminal case, such order must limit disclosure to those law enforcement and prosecutorial officials who are responsible for or are conducting the investigation or prosecution and must limit their use of the record to cases involving extremely serious crimes or suspected crimes.
Specific Government Functions: We may disclose your PHI to military personnel and veterans in certain situations. We may disclose your PHI for national security purposes, such as protecting the President of the United States or conducting intelligence operations.
Military/Veterans: We may disclose your PHI as required by military command authorities, if you are a member of the armed forces.
Prohibition on Sale of PHI: We will not directly or indirectly receive remuneration or payment in exchange for any PHI unless Arcadia Trails obtains a valid authorization that includes a specification of whether the PHI can be further exchanged for remuneration by the entity receiving PHI of the individual. The prohibition against selling PHI will not apply if the purpose of the exchange is for:
1. public health activities (The Secretary may issue regulations limiting the price charged for PHI under this exception for public health activities);
2. research, but only if the price charged reflects the costs of preparation and transmittal of the data for such purpose;
3. treatment and payout purposes;
4. health care operations associated with the sale, transfer, merger or consolidation of all or part of Arcadia Trails;
5. remuneration provided by Arcadia Trails to a Qualified Service Organization pursuant to a legitimate services contract or arrangement;
6. providing an individual with a copy of his/her medical record; and
7. as required by law any other purpose approved by the Secretary.
Fundraising: We may use your PHI (specifically, demographic information related to you including name, address, telephone, other contact information age, gender, date of birth), the dates of your health care services, the department of service, treating physician, outcome information and health insurance status, to contact you about fundraising programs. If, in the past, you have been a donor to Arcadia Trails, you may receive mailings related to specific areas or programs. We may disclose this information to qualified service organizations or a foundation to assist us in fundraising efforts. Each fundraising communication will include a clear and conspicuous statement allowing you the opportunity to elect not to receive any further fundraising communications. We will not send any further fundraising communications to you if you elect not to receive them. Arcadia Trails may permit you to opt back into receiving fundraising communications. We will not condition treatment or payment on your choice with respect to the receipt of fundraising communications.
Note: If you do not want to be contacted for fundraising efforts, you must notify the Arcadia Trails Privacy Officer in writing at the address shown at the bottom of this Notice or you may email Arcadia Trails at [email protected].
PATIENT HEALTH INFORMATION RIGHTS:
Although all records concerning your treatment at an Arcadia Trails facility are the property of Arcadia Trails, you have the following rights concerning your PHI.
Right to Receive Electronic Copy of Your PHI (fees may apply): If Arcadia Trails uses or maintains an electronic health record, or EHR, you have the right to receive a copy of such information in an electronic format upon request. The electronic copy will be provided in the form or format you request, if it is readily producible in such form or format; or if not, in a readable electronic form and format as agreed to by you and Arcadia Trails. In addition, if you direct Arcadia Trails will transmit the copy, whether in electronic or paper form, directly to an entity or person designated by you. Your request must be in writing, signed, and clearly identify the designated person and where to send the copy of your PHI.
Right to Confidential Communications: You have the right to receive confidential communications of your PHI by alternative means or at alternative locations. For example, you may request that we only contact you at work or by mail. You must submit your request in writing and identify how or where you wish to be contacted. We will accommodate all reasonable requests.
Right to Inspect and Copy: You have the right to inspect and copy your PHI as provided by law. This right does not apply to psychotherapy notes. Your request must be made in writing. We have the right to charge you the amounts allowed by state or federal law for such copies. We may deny your request to inspect and copy in certain circumstances. If you are denied access, you may request that the denial be reviewed. A licensed health care professional chosen by us will review your request and the denial. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.
Right to Amend: If you feel that the PHI we have about you is incorrect or incomplete, you have the right to request an amendment of your PHI. You must submit your request in writing and state the reason(s) for the amendment. We may deny your request for an amendment if (1) the request is not in writing or does not include a reason to support the request; (2) the information was not created by us or is not part of the medical record that we maintain; (3) the information is not part of the information that you would be permitted to inspect or copy; or (4) the information is accurate and complete. If we deny your amendment, you have a right to file a statement of disagreement with our Privacy Officer.
Right to an Accounting: You have the right to obtain a statement of certain disclosures of your PHI to third parties, except those disclosures made for treatment, payment or health care operations, authorized by you or pursuant to this Notice. To request this list, you must submit your request in writing and provide the specific time period requested. You may request an accounting for up to six (6) years prior to the date of your request (three years if PHI is an electronic health record). If you request more than one (1) accounting in a 12-month period, we may charge you for the costs of providing the list. We will notify you of the cost involved and you may choose to modify or withdraw your request before any costs are incurred.
Right to Request Restrictions on Disclosure(s): You have the right to request restrictions or limitations on PHI we use or disclose about you unless our use or disclosure is required or permitted by law. Any agreement to additional restrictions must be in writing and signed by a person authorized to make such an agreement on behalf of Arcadia Trails. To request restrictions, you must make your request in writing and tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure or both; and (3) to whom you want the limits to apply. We will grant a request for restriction if (1) the disclosure is to a health plan for purposes of either payment or health care operations, and (2) the PHI pertains to a service for which you have already paid in full out-of-pocket. We are not required to honor other requests. However, if we agree, we will comply with your request unless the information is needed to provide emergency treatment to you.
Out-of-Pocket-Payments. If you have paid out-of-pocket in full prior to the provision of a specific health care item or service (in other words, you have paid in full and have requested that we not bill your health plan to obtain payment), you have the right to ask that your PHI with respect to that item or service not be disclosed to a health plan for purposes of payment or health care operations, and we will honor that request, unless we must disclose the information for treatment or legal reasons.
Right to Receive a Paper Copy of this Notice: You have the right to a paper copy of this Notice. If you have received this Notice in electronic form and would like a paper copy, please contact the Arcadia Trails Privacy Officer at the number or email address listed below.
Right to Revoke Authorization: You have the right to revoke your authorization to use or disclose your PHI, EXCEPT to the extent that action has already been taken by us in reliance on your authorization.
Right to Get Notice of a Breach. You have the right to be notified upon a breach of your unsecured PHI. In some circumstances, our qualified service organization may provide the notification. If you have provided us with a current email address, we may use email to communicate information related to the breach. We may also provide notification by other methods as appropriate.
CHANGES TO THIS NOTICE: We will abide by the terms of the Notice currently in effect. We reserve the right to change the terms of its Notice and to make the new Notice provisions effective for all PHI we maintain. We will provide you with the revised Notice at your first visit following the revision of the Notice.
OWNERSHIP CHANGE: In the event Arcadia Trails is sold or merged with another organization, your PHI may become property of the new owner.
How to Contact Us
If you need to request medical records or exercise any of the rights laid out in this Notice, please contact our Health Information Management department:
Phone: 877-778-7211
Email: [email protected]
Website: https://integrisok.com/patient-information/release-medical-records
Mail Address: INTEGRIS Health HIM Department
3366 NW Expressway, Building D Ste. C20 Oklahoma City, OK 73112
TO REPORT A PRIVACY VIOLATION:
If you believe your privacy rights have been violated, you may call (405) 949-6081 (or toll-free at 1-877-805-9681), or send an email to [email protected] or you may file a complaint with our Corporate Privacy Officer at:
INTEGRIS Corporate Privacy Officer
3001 Quail Springs Parkway
Oklahoma City, OK 73134
You may also report a privacy rights violation to the Secretary of the Department of Health and Human Services, Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201. All complaints must be in writing and filed within 180 days of when you knew or should have known that the act or omission complained of occurred. You will not be penalized for filing a complaint.
Phone: 888-696-6775
Website: https://www.hhs.gov/ocr/privacy/hipaa/complaints
Mail Address: 200 Independence Avenue, S.W., Washington, D.C. 20201
NOTICE EFFECTIVE DATE: April 6, 2022.
Original Notice: September 1, 2013 and January 12, 2021
(Form INT-1678 - Version #6 – Rev. 7/2/21)