Notice of Privacy Practices

NOTICE OF PRIVACY PRACTICES (HIPAA AUTHORIZATION)

MILESTONE SPEECH THERAPY PLLC 26 W Main St., Gowanda NY 14070

owned by: Lisa Coudrey (716) 290-5551

Effective Date: 5/20/2024

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

We are required by law to maintain the privacy of protected health information, this information may include: notes from your health care provider, your medical history, your test results, treatment notes and insurance information.

We are also required to provide individuals with notice of our legal duties and privacy practices in regards to protected health information, and to notify affected individuals about breach of unsecured protected health information. This notice describes how we may use and disclose your medical information. It also describes your rights and our legal obligations with respect to your medical information.

A. How This Practice May Use or Disclose Your Health Information without your permission.

1. Treatment. We use medical information about you to provide you with our services or treatment and we may share your medical information with other providers involved in your care. For example, we may share your treatment results with your doctor, etc.

2. Payment. We use and disclose medical information about you to obtain payment for the services we provide. For example, we give your health plan the information it requires before it will pay us. We may also disclose information to other health care providers to assist them in obtaining payment for services they have provided to you.

3. Health Care Operations. We may use and disclose medical information about you to operate this practice. For example, we may use and disclose this information to review and improve the quality of services we provide, or check on performance of our staff. Or we may use and disclose this information to get your health plan to authorize services or referrals. We may also use and disclose this information as necessary for medical reviews, legal services and audits, including fraud and abuse detection and compliance programs .We may also share your medical information with our "business associates," such as our billing service, that perform administrative services for us. We have a written contract with each of these business associates that contains terms requiring them and their subcontractors to protect the confidentiality and security of your protected health information. We may also share your information with other healthcare providers, health care clearinghouses or health plans that have a relationship with you

4. Appointment Reminders. We may use and disclose medical information to contact and remind you about appointments. Reminders may be sent in the mail, by email, or by phone call or voicemail message. If you do not wish to get reminders, please let us know. If you are not home, we may leave this information on your answering machine or in a message left with the person answering the phone.

5. Sign In Sheet. We may use and disclose medical information about you by having you sign in when you arrive at our office. We may also call out your name when we are ready to see you. 

6. Required by Law. As required by law, we will use and disclose your health information, but we will limit our use or disclosure to the relevant requirements of the law. When the law requires us to report abuse, neglect or domestic violence, or respond to judicial or administrative proceedings, or to law enforcement officials, we will further comply with the requirement set forth below concerning those activities.

7. Public Health. We may as required by law, to disclose your health information to public health authorities for purposes related to: preventing or controlling disease, injury or disability; reporting child, elder or dependent adult abuse or neglect; reporting domestic violence; reporting to the Food and Drug Administration problems with products and reactions to medications; and reporting disease or infection exposure.

8. Health Oversight Activities. We may, and are sometimes required by law, to disclose your health information to health oversight agencies during the course of audits, investigations, inspections, licensure and other proceedings, subject to the limitations imposed by law.

9. Judicial and Administrative Proceedings. We may, and are sometimes required by law, to disclose your health information in the course of any administrative or judicial proceeding to the extent expressly authorized by a court or administrative order. We may also disclose information about you in response to a subpoena, discovery request or other lawful process if reasonable efforts have been made to notify you of the request and you have not objected, or if your objections have been resolved by a court or administrative order.

10. Law Enforcement. We may, and are sometimes required by law, to disclose your health information to a law enforcement official for purposes such as identifying or locating a suspect, fugitive, material witness or missing person, complying with a court order, warrant, grand jury subpoena and other law enforcement purposes.

11. Public Safety. We may, and are sometimes required by law, to disclose your health information to appropriate persons in order to prevent or lessen a serious and imminent threat to the health or safety of a particular person or the general public.

12. Specialized Government Functions. We may disclose your health information for military or national security purposes or to correctional institutions or law enforcement officers that have you in their lawful custody.

13. Workers’ Compensation. We may disclose your health information as necessary to comply with workers’ compensation laws. For example, to the extent your care is covered by workers' compensation, we will make periodic reports to your employer about your condition. We are also required by law to report cases of occupational injury or occupational illness to the employer or workers' compensation insurer.

14. Change of Ownership. In the event that this medical practice is sold or merged with another organization, your health information/record will become the property of the new owner, although you will maintain the right to request that copies of your health information be transferred to practice or provider.

15. Breach Notification. In the case of a breach of unsecured protected health information, we will notify you as required by law. If you have provided us with a current e-mail address, we may use e-mail to communicate information related to the breach. In some circumstances our business associate may provide the notification. We may also provide notification by other methods as appropriate.

B. Your Rights: You have the right to:

1. Right to Request Special Privacy Protections. : You can request us not to use or share your information for treatment, payment, or health care operations. You can also ask us not to share information with individuals involved in your care, e.g. family members or friends. You must make these requests in writing. We must share information when required by law. We reserve the right to accept or reject any other request, and will notify you of our decision.

2. Right to Request Confidential Communications. You can request that you receive your health information in a specific way or at a specific location. For example, you may ask that we send information to a particular e-mail account or to your work address. You must make these requests in writing.

3. Right to Inspect and Copy. Other than "session notes", you have the right to see your health information and request a copy of that information with limited exceptions. To access your medical information, you must submit a written request detailing what information you want access to, whether you want to inspect it or get a copy of it, and if you want a copy, your preferred form and format. I may charge a reasonable, cost based fee for doing so.

4. Right to Amend or Supplement. You have a right to request that we amend or change your health information that you believe is incorrect or incomplete. You must make such requests in writing and provide a reason for the change. We don’t have to change your health information, and will provide you with information about this practice's denial and how you can disagree with the denial. We may deny your request if we do not have the information, if we did not create the information (unless the person or entity that created the information is no longer available to make the amendment), if you would not be permitted to inspect or copy the information at issue, or if the information is accurate and complete as is. If we deny your request, you may submit a written statement of your disagreement with that decision, and we may, in turn, prepare a written rebuttal. All information related to any request to amend will be maintained and disclosed in conjunction with any subsequent disclosure of the disputed information.

5. Right to an Accounting of Disclosures. You have a right to receive an accounting of disclosures of your health information made by this practice. You must make such request in writing. This practice does not have to account for the disclosures provided to you or pursuant to your written authorization, or as described in above paragraphs: (treatment), (payment), (health care operations), (notification and communication with family) and (specialized government functions) of Section A of this Notice of Privacy Practices or disclosures for purposes of research or public health

6. Right to a Paper or Electronic Copy of this Notice. You have a right to notice of our legal duties and privacy practices with respect to your health information, including a right to a paper copy of this Notice of Privacy Practices, even if you have previously requested its receipt by e-mail.

C. Changes to this Notice of Privacy Practices

We reserve the right to change this Notice of Privacy Practices at any time in the future. After an amendment is made, the revised Notice of Privacy Protections will apply to all protected health information that we maintain, regardless of when it was created or received. We will keep a copy of the current notice posted in our practice location, and a copy will be available at each appointment.

This notice went into effect on 5/20/2024

Acknowledgement of Receipt of Privacy Notice

Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), you have certain rights regarding the use and disclosure of your protected health information. By signing below, you are acknowledging that you have received a copy of HIPAA Notice of privacy practices.