This Notice serves as a notice for par8o, LLC. We will follow the terms of this Notice and may share health information with each other for purposes of treatment, payment and health care operations as described in this Notice and as required under the Health Insurance Portability and Accountability Act of 1996.
We respect the confidentiality of your patients’ health information and recognize that information about your patients’ health is personal. We are committed to protecting your patients’ health information and to informing you of their rights regarding such information. We are also required by law to protect the privacy of your patients’ protected health information and to provide you with notice of these legal duties.
This Notice explains how, when and why we typically use and disclose health information and our privacy rights regarding your patients’ health information. In our Notice, we refer to our uses and disclosures of health information as our "Privacy Practices." Protected health information generally includes information that we create or receive that identifies your patients and their past, present or future health status or care or the provision of or payment for that health care. We are obligated to abide by these Privacy Practices as of the effective date listed above.
We may, however, change our Privacy Practices in the future and specifically reserve our right to change the terms of this Notice and our Privacy Practices. We will communicate any change in our Notice and Privacy Practices as described at the end of this Notice. Any changes that we make in our Privacy Practices will affect any protected health information that we maintain.
Generally, our Privacy Practices strive:
par8o is including HITECH Act provisions to its Notice as follows:
Under HITECH, par8o is required to notify users whose patients’ PHI has been breached. Notification must occur by first class mail within 60 days of the event. A breach occurs when an unauthorized use or disclosure that compromises the privacy or security of PHI poses a significant risk for financial, reputational, or other harm to the individual. This notice must:
par8o’s Business Associate Agreements have been amended to provide that all HIPAA security administrative safeguards, physical safeguards, technical safeguards and security policies, procedures, and documentation requirements apply directly to the business associate.
HITECH expands this right, giving individuals the right to access their own e-health record in an electronic format and to direct par8o to send the e-health record directly to a third party. par8o may only charge for labor costs under the new rules.
par8o does not currently have to provide an accounting of disclosures of PHI to carry out treatment, payment, and health care operations. However, starting January 1, 2014, the Act will require par8o to provide an accounting of disclosures through an e-health record to carry out treatment, payment, and health care operations. This new accounting requirement is limited to disclosures within the three-year period prior to the individual’s request.
par8o must either: (1) provide an individual with an accounting of such disclosures it made and all of its business associates disclosures; or (2) provide an individual with an accounting of the disclosures made by par8o and a list of business associates, including their contact information, who will be responsible for providing an accounting of such disclosures upon request.
The par8o technology is designed to facilitate referrals from one Healthcare Provider (and/or their staff) to another Healthcare Provider (and/or their staff). Under no circumstances will health information about your patients be shared with another Healthcare Provider (and/or their staff), unless it is in support of a referral that you have made and in that case, health information will only be shared with the healthcare providers that you designate. Those healthcare providers, in accordance with the HIPAA guidelines have the ability to share that information with their various staff members and/or designees. In addition, there are situations where the law permits or requires us to use and disclose your patients’ health information without your authorization. Such situations are described in this section of the Notice. Specifically, we may use and disclose your patients’ protected health information as follows:
There are situations where we may use and/or disclose your patients’ health information without first obtaining your written authorization for purposes other than for treatment or health care operations. Except for the specific situations where the law requires us to use and disclose information (such as reports of births to the health department or reports of abuse or neglect to social services), we have listed all these permitted uses and disclosures in this section.
For situations not generally described in our Notice, we will ask for your written authorization before we use or disclose your patients’ health information. You may revoke that authorization, in writing, at any time to stop future disclosures of your patients’ information. Information previously disclosed, however, will not be requested to be returned nor will your revocation affect any action that we have already taken. In addition, if we collected the information in connection with a research study, we are permitted to use and disclose that information to the extent it is necessary to protect the integrity of the research study.
This portion of our Notice describes your patients' individual privacy rights regarding their health information and how they may exercise those rights.
You may request, in writing, a restriction on how we use or disclose your patients’ protected health information for treatment or for activities related to our health care operations. You may also request a restriction on what health information we may disclose to someone who is involved in your patients’ care, such as a family member or friend. To make a request to par8o please contact par8o’s Chief Medical Officer Adam Sharp at firstname.lastname@example.org.
We are not required to agree to your request. Additionally, any restriction that we may approve will not affect any use or disclosure that we are legally required or permitted to make under the law.
You may request and receive reasonable changes in the manner or the location where we may contact your patients for appointment reminders, lab results or other related information. You must make your request in writing and specify the alternate method or location where your patients wish to be contacted. To make a request to par8o please contact par8o’s Chief Medical Officer Adam Sharp at email@example.com
We will accommodate your reasonable request, but in determining whether your request is reasonable, we may consider the administrative difficulty it may impose on us.
You may ask to look at and obtain a copy of your patients’ health information. You must make your request in writing. To make a request to par8o please contact par8o’s Chief Medical Officer Adam Sharp at firstname.lastname@example.org
We may charge a fee for copying or preparing a summary of requested health information. We will respond to your request for health information within 30 days of receiving your request unless your patients’ health information is not readily accessible.
As stated previously, HITECH expands this right, giving individuals the right to access their own e-health record in an electronic format and to direct par8o to send the e-health record directly to a third party. par8o may only charge for labor costs under electronic transfers of e-health records.
You may request, in writing, a change or addition to your patients’ health information. To make a request to par8o please contact par8o’s Chief Medical Officer Adam Sharp at email@example.com. The law limits your ability to change or add to your patients’ health information. These limitations include whether we created or include the health information within our medical records or if we believe that the health information is accurate and complete without any changes. Under no circumstances will we erase or otherwise delete original documentation in your patients’ health information.
You may ask, in writing, for an accounting of certain types of disclosures of your patients’ health information. The law excludes from an accounting many of the typical disclosures, such as those made to care for your patients or where you provided your written authorization to the disclosure.
To make a request for an accounting: for par8o, please submit your request to the individual listed in the Contact Section of this Notice. Generally, we will respond to your request within 60 days of receiving your request unless we need additional time.
We provide you with our Notice to explain and inform you of our Privacy Practices, and this Notice is available on the par8o website. Even if you have requested this Notice electronically, you may request a paper copy at any time.
We reserve the right to change this Notice concerning our Privacy Practices affecting all the health information that we now maintain, as well as information that we may receive in the future. We will provide you with the revised Notice by making it available to you upon request and by posting it at our service sites. We will also post the revised Notice on our website.
We welcome an opportunity to address any concerns that you may have regarding the privacy of your patients’ health information. If you believe that the privacy of your patients’ health information has been violated, you may file a complaint with the individual(s) listed in this Notice. You also may file a complaint with the Secretary of the U.S. Department of Health and Human Services.