THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND
DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT
CAREFULLY. This Notice takes effect on January 1, 2016.
Who We Are
This Notice describes the privacy practices of CHRISTUS Health Plan,
including all of our employees with access to your medical records, billing
records or other information about your health care. As used in this
Notice, the term “health information” means information that identifies
you. Examples include your, name, date of birth, Social Security number,
health care you received and details regarding the payment for your health
care.
Our Privacy Obligations
We understand that your health information is personal and we are committed
to protecting your privacy. In addition, we are required by law to maintain
the privacy of your health information, to provide you with this Notice of
our legal duties and privacy practices with respect to your health
information, and to notify you in the event of a breach of your unsecured
health information. We may disclose your information electronically or in
any other medium. However, whenever we use or disclose your health
information, we are required to abide by the terms of the Notice that is in
effect at the time of the use or disclosure.
Uses and Disclosures of Your Health Information Without Your Written
Authorization
In certain situations (which are described in the next section below) we
must obtain your written authorization in order to use and/or disclose your
health information. However, we may use and disclose your health
information without your written authorization for the following purposes:
A. For Treatment. We may use or disclose your health information to help
with your health care. For example, we may use your health information to
tell you about services that are available to you or to remind you about
appointments. As another example, we might disclose your health information
to an emergency room doctor if you are unable to provide your medical
history as the result of an accident in order to inform the doctor about
the types of prescription drugs you currently take.
B. For Payment. We may use and disclose your health information so claims
for health care treatment, services, and supplies you receive from health
care providers may be paid. For example, we may receive and maintain
information about surgery you received to enable us to process a hospital’s
claim for reimbursement of surgical expenses incurred on your behalf.
C. Health care operations. We may use and disclose your health information
for our health care operations, which help us do our job and operate our
business. We may use and disclose your health information for internal
administration and planning and various activities that improve the quality
and cost effectiveness of the benefits that we deliver to you. For example,
we may use your health information for case management or to perform
population-based studies designed to reduce health care costs. In addition,
we may use or disclose your health information to conduct compliance
reviews, audits, and/or for fraud and abuse detection. We are prohibited
from using or disclosing your genetic information for underwriting
purposes.
D. To a Business Associate. Certain services are provided to us by third
party entities known as “business associates” that might require access to
your health information in order to provide such services.
E. Family and friends. We may disclose your health information to a close
friend, family member or any other person identified by you who is involved
in, or who helps pay for, your health care if you are present and do not
object to the disclosure (or if it can be inferred that you do not object).
F. We may also use and disclose your health information without your
authorization for the following purposes:
-
As Required by Law
-
Public Health Activities
-
Health or Safety
-
Abuse, Neglect, or Domestic Violence reporting
-
Health Oversight Activities
-
Judicial and Administrative Proceedings
-
Law Enforcement Officials
-
National Security, Intelligence Activities, and Protective Services
-
Organ and Tissue Procurement
-
Coroners, Medical Examiners, and Funerals Directors
-
Workers’ Compensation
-
Some Research studies
G. Marketing. We may contact you to provide you information about treatment
alternatives or other health-related benefits and services that may be
useful to you. We may also communicate with you face-to-face to encourage
you to purchase or use a product or service, or use and disclose your
health information to provide a promotional gift of nominal value to you.
H. Fundraising Communications. We may contact you to request a
tax-deductible contribution to support our charitable activities. In
connection with any fundraising, we may disclose to our fundraising staff,
without your written authorization, your demographic information (such as
your name, address and phone number), dates on which we provided health
care to you, the department that treated you, the names of your treating
physicians, information regarding the outcome of your treatment, and your
health insurance status. You have the right to opt-out of receiving future
communications with each solicitation. Information on how to opt-out will
be contained in each communication.
State law may further limit the permissible ways we use or disclose your
health information. If an applicable state law imposes stricter
restrictions, we will comply with that state law.
Uses and Disclosures that Require Your Written Authorization
For any purpose other than the ones described above, we only use or
disclose your health information when you give us your written
authorization.
A. Marketing. We must obtain your written authorization prior to using your health information for purposes that are considered marketing under the
HIPAA privacy rules. For example, we will not accept any payments from
other organizations or individuals in exchange for making communications to
you about treatments, therapies, health care providers, settings of care,
case management, care coordination, and products or services unless you
have given us your authorization to do so or the communication is permitted
by law. We may provide refill reminders or communicate with you about a
drug or biologic that is currently prescribed to you so long as any payment
we receive for making the communication is reasonably related to our cost
of making the communication. In addition, we may market to you in a
face-to-face encounter and give you promotional gifts of nominal value
without obtaining your written authorization.
B. Sale of health information. We will not make any disclosure of health
information that is a sale of health information without your written
authorization.
C. Psychotherapy Notes. We will not use or disclose psychotherapy notes
about you without your authorization except for use by the mental health
professional who created the notes to provide treatment to you, for our
mental health training programs or to defend ourselves in a legal action or
other proceeding brought by you.
D. Revocation of Your Authorization. You may revoke your authorization at
any time by delivering a written revocation form to our Privacy Office. If
you revoke your authorization, we will no longer use or disclose your
health information except as described above (or as permitted by any other
authorizations that have not been revoked). However, your revocation will
not be effective with respect to any health information previously
disclosed to a third party in reliance on your prior authorization.
Your Individual Rights
A. Right to Request Additional Restrictions. You may request restrictions
on our use and disclosure of your health information (1) for treatment,
payment and health care operations, (2) to individuals (such as a family
member, other relative, close personal friend or any other person
identified by you) involved with your care or with payment related to your
care, or (3) to notify or assist in the notification of such individuals
regarding your location and general condition. While we will consider all
requests for additional restrictions carefully, we are not required to
agree to a requested restriction unless the request is to restrict our
disclosure to a health plan for purposes of carrying out payment or health
care operations, the disclosure is not required by law and the information
pertains solely to a health care item or service for which you (or someone
on your behalf other than the health plan) have paid us out of pocket in
full. If you wish to request additional restrictions, please obtain a
request form from our Privacy Office and submit the completed form to the
Privacy Office. We will send you a written response.
B. Right to Receive Communications by Alternative Means or at Alternative
Locations. You may request, and we will accommodate, any reasonable written
request for you to receive your health information by alternative means of
communication (e.g., by email) or at alternative locations.
C. Right to Inspect and Copy Your Health Information. You may request
access to your medical record file and billing records maintained by us in
order to inspect and request copies of the records. Under limited
circumstances, we may deny you access to a portion of your records. If you
desire access to your records, please obtain a record request form from
Health Information Management and submit the completed form to the Privacy
Office. If you request copies, we may charge you a reasonable copy fee.
D. Right to Amend Your Records. You have the right to request that we amend
your health information maintained in your medical record file or billing
records. If you desire to amend your records, please obtain an amendment
request form from the Health Information Management and submit the
completed form to Health Information Management. We will comply with your
request unless we believe that the information that would be amended is
accurate and complete or other special circumstances apply.
E. Right to Receive An Accounting of Disclosures. Upon request, you may
obtain an accounting of certain disclosures of your health information made
by us during any period of time prior to the date of your request provided
such period does not exceed six years. If you request an accounting more
than once during a twelve (12) month period, we may charge you a reasonable
fee for the accounting statement.
F. Right to Receive Paper Copy of this Notice. Upon request, you may obtain
a paper copy of this Notice, even if you agreed to receive such notice
electronically.
G. Personal Representatives. You may exercise your rights through a
personal representative, as permitted under our health information privacy
policy, and as determined under applicable state law. Your personal
representative must complete a Personal Representative Form. We reserve the
right to deny access to your personal representative.
H. For Further Information; Complaints. If you desire further information
about your privacy rights, are concerned that we have violated your privacy
rights or disagree with a decision that we made about access to your health
information, you may contact our Privacy Office. You may also file written
complaints with the Office for Civil Rights of the U.S. Department of
Health and Human Services. Upon request, the Privacy Office will provide
you with the correct address for the Office for Civil Rights. We will not
retaliate against you if you file a complaint with us or with the Office
for Civil Rights. Privacy Office Contact Information If you have a
question, concern, or complaint regarding how your health information is
protected, used, and/or disclosed, you may contact the Privacy Office by
any of the following means:
Email:
healthplanprivacy@christushealth.org
Phone (toll free): 1-844-444-8440
Mail:
Privacy Officer
c/o CHRISTUS Health Compliance Department
919 Hidden Ridge
Irving, TX 75038
Right to Change Terms of this Notice
We may change the terms of this Notice at any time. If we change this
Notice, we may make the new Notice terms effective for all of your health
information that we maintain, including any information created or received
prior to issuing the new Notice. If we change this Notice, we will post the
new Notice on our Internet site at www.christushealthplan.org. You also may
obtain any new Notice by contacting the Privacy Office.
Internet Privacy Statement
CHRISTUS Health is committed to protecting your privacy when you visit our
website. Any personal information provided by site users will be protected
to the extent possible and any data provided to CHRISTUS Health will be
appropriately managed. CHRISTUS will not release a site visitor's name,
street address, telephone number, or e-mail address to a third party
without consent. Third party service providers facilitate some areas of the
christushealth.org site and may have access to personal information
submitted by users. CHRISTUS Health will require third parties facilitating
this site to maintain the privacy of personal information.
CHRISTUS offers this site as a service to our visitors and the communities
we serve. If this site receives electronic mail, CHRISTUS will endeavor to
keep that e-mail private, viewable only by the sender and the recipient,
except:
-
In the event CHRISTUS Health, as the site operator, determines it is
necessary to protect ourselves or other visitors from injury or damage.
-
In the event disclosure is otherwise required by law.
All electronic messages may be copied as a routine matter and may be
destroyed on a regular basis pursuant to the policies of and in the
discretion of CHRISTUS Health. CHRISTUS Health disclaims any responsibility
to maintain copies of any such communication or to assure that such
information is deleted.
CHRISTUS Health may use cookies to collect non-personal information on site
visitors. Note: A cookie file contains unique information a web site can
use to track things, such as the number of visits by a site visitor, list
of pages visited, and the date when a visitor last looked at a specific
page, or to identify a visitor's session at a particular web site.
This site may contain links to other sites on the Internet. CHRISTUS Health
is not responsible for the privacy practices or the content of such sites.