Notice of Privacy Practices
Effective Date: September 23, 2013
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND
DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW
PURPOSE OF THIS NOTICE
Mid-Columbia Medical Center (MCMC) is committed to preserving the privacy
of your health information. In fact, we are required by law to do so for
any health information created or received by us. MCMC is required to
provide this Notice of Privacy Practices (“Notice”) to you.
The Notice tells you how we can and cannot use and disclose the health
information that you have given to us or that we have learned about you
when you were a patient in our system. It also tells you about your rights
and our legal duties concerning your health information.
MCMC is required to abide by this Notice and any future changes to the
Notice that we are required or authorized by law to make at all MCMC locations,
including Celilo Cancer Center, Diabetes Services, Visiting Health Services,
Mid-Columbia Out-patient Clinics, , Mind Body Medicine, Mid-Columbia Health
Foundation, Planetree Health Resource Center, Water’s Edge Health
and Wellness Center and the
hospital. This notice applies to the practices of:
- All MCMC employees, volunteers, students, and clinicians who have access
to health information.
- Any health care professional authorized to enter information into your
MCMC health record.
For the rest of this Notice, “MCMC,” “we” and “us”
will refer to all services, service areas and workers of MCMC. When we
use the words “your health information,” we mean any information
that you have given us about you and your health, as well as information
that we have received while we have taken care of you (including health
information provided to MCMC by those outside of MCMC).
We will have a copy of the current Notice with an effective date in clinical
locations and on our website at
USES AND DISCLOSURES FOR TREATMENT, PAYMENT, AND HEALTH CARE OPERATIONS
HIPAA and other privacy-related laws and rules allow us to use and disclose
your protected health information for purposes of treatment, payment and
health care operations.
Treatment – Information obtained by a nurse, physician, or other member of
our health care team will be recorded in your medical record and used
or disclosed to help decide what medical care and services may be right
for you. For example, a physician treating you for a broken leg may need
to know if you have diabetes because diabetes may slow the healing process.
We may also provide health information to other health care professionals
providing you with medical care to help them stay informed about the progress
of your treatment.
Payment – We may use and disclose your health information so that we may
bill and collect payment from you, an insurance company, or someone else
for health care services you receive from MCMC. For example, we may need
to give your health plan medical information about surgery you received
at MCMC so your health plan will pay us or reimburse you for the surgery.
We may also tell your health plan about a treatment you are going to receive
to obtain prior approval or to determine whether your
plan will cover the treatment.
Health Care Operations – We may use and disclose medical information about you for our
operations. We may use and disclose medical information to conduct or
arrange for services, including: business planning, development and management;
medical review; legal services; risk management; auditing functions, including
fraud and abuse detection and compliance programs. These uses and disclosures
are necessary to run MCMC and ensure that all of our patients receive
quality care. For example, we
use and disclose your health information to assess quality and improve
services. We may also use and disclose medical information to review the
qualifications and performance of our health care providers and to train
Fundraising Activities – As part of MCMC’s healthcare operations, we may use and
disclose a limited amount of your health information internally, or to
the Mid-Columbia Health Foundation to allow them to contact you to raise
money for MCMC. The health information released for these fundraising
purposes can include your name, address, other contact information, gender,
age, date of birth, dates on which you received service, health insurance
status, the outcome of your treatment at MCMC and your treating physician’s
name. Any fundraising communications you receive from MCMC or its Foundation
will include information on how you can elect not to receive any further
fundraising communications from MCMC.
Uses and Disclosures You Can Limit
Facility Directory – Unless you notify us that you object, we may include certain information
about you in the hospital directory in order to respond to inquiries from
friends, family, clergy and others who inquire about you when you are
a patient in the hospital. Specifically, your name, location in the hospital
and your general condition (e.g., good, fair, serious, critical) may be
released to people who ask for you by name. In addition, your religious
affiliation may be given to a member of the clergy, such as a priest or
rabbi, even if they don’t ask for you by name.
Family and Friends – Unless you notify us that you object, we may provide your health
information to individuals, such as family and friends, who are involved
in your care or who help pay for your care. We may do this if you tell
us we can do so, or if you know we are sharing your health information
with these people and you don’t stop us from doing so. There may
also be circumstances when we can assume, based on our professional judgment,
that you would not object. For example, we may assume you agree to our
disclosure of your information to your spouse if your spouse comes with
you into the exam room during treatment.
Also, if you are not able to approve or object to disclosures, we may make
disclosures to a particular individual (such as a family member or friend),
that we feel are in your best interest and that relate to that person’s
involvement in your care. For example, we may tell someone who comes with
you to the emergency room that you suffered a heart attack and provide
updates on your condition. We may also make similar professional judgments
about your best interests that allow another person to pick up such things
as filled prescriptions, medical supplies and x-rays.
Appointment Reminders; Treatment Alternatives; and Health-Related Benefits
and Services – We may contact you to remind you about appointments and provide
you with information about treatment alternatives or other health-related
benefits and services that may be of interest to you.
OTHER PERMITTED USES AND DISCLOSURES OF HEALTH CARE INFORMATION
Medical Research – We may use and disclose health care information about you for
research purposes if the research has been properly approved by an Institutional
Review Board (or Privacy Board) and has policies to protect the privacy
of your health information. We may also share your medical information
with researchers preparing to conduct a research project.
To Funeral Directors / Coroners – We will disclose health care information to a coroner, medical
examiner or funeral director as required by or applicable to law.
To Organ Procurement Organizations – We will disclose health care information as is necessary to facilitate
organ or tissue donation and transplantation if an appropriate consent
is obtained by you or your immediate family.
As Required by Federal, State, or Local Law – We will disclose health care information when required to do so
under federal, state or local law.
For Law Enforcement Purposes – We may disclose health care information as required by law or
as directed by a court order, warrant, criminal subpoena, or other lawful
process, and in other limited circumstances for purposes of identifying
or locating suspects, fugitives, material witnesses, missing persons or
Pursuant to Lawful Subpoena or Court Order – We may disclose health care information in response to
a court or administrative order. We also may disclose health care information
about you in response to a civil subpoena, discovery request, or other
lawful process by someone involved in the disagreement, but only if efforts
have been made to tell you about the request or to obtain an order protecting
the information requested.
To Report Suspected Abuse or Neglect – If you agree or when required or authorized by law, we may disclose
health care information to appropriate government authorities.
To Avert a Serious Threat to Health or Safety – We will use and disclose health care information when it involves
a serious threat to your health or safety or the health and safety of
the public or another person.
For Disaster Relief Purposes – We may share health care information about you with disaster relief
agencies to assist in notification of your condition to family or others.
To Correctional Institutions – If you are an inmate or under the custody of a law enforcement
official, we may release health care information about you to the correctional
institution or law enforcement official. This disclosure would be necessary
for the institution to provide you with health care, to protect your health
or the health and safety of others, or for the safety and security of
the correctional institution.
To Health and Oversight Agencies – We may disclose health care information about you to a health
oversight agency for activities authorized by law. These activities are
necessary to monitor the health care system, government programs, and
compliance with civil rights laws. These oversight activities may include
audits, investigations, inspections, and licensure.
For Public Health Purposes – We may disclose health care information about you for public health
activities as authorized by law. This would include notifying a person
who may have been exposed to a disease or may be at risk for contracting
or spreading a disease or condition; to prevent or control disease, injury
or disability; or to report births and deaths.
To the Food and Drug Administration – (FDA) – We may disclose health care information relative to problems and
adverse events with food, supplements, medications, and products and product
defects, or post marketing surveillance information to enable product
recalls, repairs, or replacement.
To Workers’ Compensation Program – We may disclose health care information to the state workers’
compensation program to the extent authorized by law.
For Work-Related Injuries or Illnesses or Workplace Medical Surveillance – We may disclose health care information where your employer has
a duty under state or federal law, to keep records or act on such information.
To the Military – As required by military command authorities if you are a member
of the armed forces, we may disclose health care information. We may also
disclose medical information about foreign military personnel to the appropriate
foreign military authority.
For Specialized Government Functions – We may disclose health care information about you to authorized
federal officials for activities including intelligence, counterintelligence,
and other national security activities authorized by law.
WHEN WRITTEN AUTHORIZATION IS REQUIRED
Uses and disclosures not in this Notice of Privacy Practices will be made
only as allowed or required by law or with your written authorization.
Special circumstances that require an authorization include most uses
and disclosures of your psychotherapy notes, certain disclosures of your
test results for the human immunodeficiency virus or HIV, genetic information,
uses and disclosures of your health information for marketing purposes
that encourage you to purchase a product or service, and for sale of your
health information with some exceptions. If you give us an authorization,
you can withdraw this written authorization at any time. To withdraw your
authorization, deliver or fax a written revocation to MCMC Health Information
Management Department, 1700 E. 19th Street, The Dalles, Oregon 97058;
fax: (541)296-7617. If you revoke your authorization, we will no longer
use or disclose your health information as allowed by your written authorization,
except to the extent that we have already relied on your authorization.
YOUR HEALTH INFORMATION RIGHTS
You have certain rights regarding your health information which we list
below. In each of these cases, if you want to exercise your rights, you
must do so in writing by completing a form that you can obtain from the
Health Information Management Department, 1700 E. 19th Street, The Dalles,
OR 97058. In some cases, we may charge you for the costs of providing
materials to you. You can get information about how to exercise your rights
and about any costs that we may charge for materials by contacting the
Health Information Management Department at (541)296-7294.
- Right to Inspect and Copy. With some exceptions, you have the right to
inspect and get a copy of the health information that we use to make decisions
about your care. For the portion of your health record maintained in our
electronic health record, you may request we provide that information
to or for you in an electronic format. If you make such a request, we
are required to provide that information for you electronically (unless
we deny your request for other reasons). We may deny your request to inspect
and/or copy in certain limited circumstances, and if we do this, you may
ask that the denial be reviewed.
- Right to Amend. You have the right to amend your health information maintained
by or for MCMC, or used by MCMC to make decisions about you. We will require
that you provide a reason for the request, and we may deny your request
for an amendment if the request is not properly submitted, or if it asks
us to amend information that (a)we did not create (unless the source of
the information is no longer available to make the amendment); (b) is
not part of the health information that we keep; (c) is already accurate
- Right to an Accounting of Disclosures. You have the right to request a
list and description of certain disclosures by MCMC of your health information.
Right to Request Restrictions. You have the right to request a restriction
or limitation on the health information we use or disclose about you (a)
for treatment, payment or health care operations, (b) to someone who is
involved in your care or the payment for it, such as a family member or
friend, or (c) to a health plan for payment or health care operations
purposes when the item or service for which MCMC has been paid out of
pocket in full by you or someone on your behalf (other than the health
plan). For example, you could ask that we not use or disclose information
about a surgery you had, a laboratory test ordered or a medical device
prescribed for your care.
Except for the request noted in (c) above, we are not required to agree
to your request. Any time MCMC agrees to such a restriction, it must be
in writing and signed by the MCMC Privacy Officer or his or her designee.
- Right to Request Confidential Communications. You have the right to request
that we communicate with you about health matters in a certain way or
at a certain place. MCMC will accommodate reasonable requests. For example,
you can ask that we only contact you at work or by mail.
- Right to a Paper Copy of This Notice. You have a right to a paper copy
of this Notice, whether or not you may have previously agreed to receive
the Notice electronically.
- Right to be Notified of a Breach. You have the right to be notified if
there is a breach – a compromise to the security or privacy of your
health information – due to your health information being unsecured.
MCMC is required to notify you within 60 days of discovery of a breach.
REVISIONS TO THIS NOTICE
We have the right to change this Notice and to make the revised or changed
Notice effective for health information we already have about you, as
well as any information we receive in the future. Except when required
by law, a material change to any term of the Notice may not be implemented
prior to the effective date of the Notice in which the material change
is reflected. MCMC will post the revised Notice at MCMC clinical locations
and on its website and provide you a copy of the revised notice upon your request.
QUESTIONS OR COMPLAINTS
If you have any questions about this Notice, please contact MCMC at 541-296-7671.
If you believe your privacy rights have been violated, you may file a
complaint with MCMC or with the Secretary of the Department of Health
and Human Services. To file a complaint with MCMC, contact MCMC at 541-296-7671.
You will not be penalized for filing a complaint.