You have the following rights regarding the medical information we maintain about you:
Right to Inspect and Copy. You have the right to inspect and copy medical information that may be used to make decisions about your care. (Usually, this includes medical and billing records but does not include psychotherapy notes.) To inspect and copy medical information that may be used to make decisions about you, you must submit your request in writing to the Privacy Officer. If you request a copy of the information, we may charge a fee for the costs of copying, mailing or other supplies associated with your request. If your PHI is maintained in an electronic format, you also have the right to request that an electronic copy of your PHI be sent to you or to another individual entity. We may charge you a reasonable cost based fee limited to the labor costs associated with transmitting the electronic health record.
We may deny your request to inspect and copy your medical information in certain limited circumstances. If you are denied access to medical information, you may request that the denial be reviewed, and except for certain limited situations, such review will be granted. Another licensed health care professional chosen by the organization will review your request and the denial. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.
Right to Amend. If you feel that medical information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for JDC.
To request an amendment, your request must be made in writing and submitted to the Privacy Officer at the address listed above. In addition, you must provide a reason that supports your request.
We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that (a) was not created by us, unless the person or entity that created the information is no longer available to make the amendment; (b) Is not part of the medical information kept by or for the organization; (c) Is not part of the information which you would be permitted to inspect and copy; or (d) is accurate and complete.
Right to an Accounting of Disclosures.
You have the right to request an accounting (list) of certain types of disclosures we have made of medical information about you. We are not required to account for certain disclosures such as: disclosures you authorize, disclosures to carry out treatment, payment or health care operations, and disclosures to persons involved in your care; provided, however, that if your PHI is maintained in an electronic health record, and if JDC has made disclosure of your PHI through the electronic health record for treatment, payment and/or health care operations purposes, you have a right to request an accounting of such disclosures that were made during the previous three years.
To request an accounting of disclosures, you must submit your request in writing to the Privacy Officer. Your request must state a time period, which may not be longer than six years (three years in the case of PHI maintained in an electronic health record) and may not include dates before April 14, 2003. Your request should indicate in what form you want the list (for example, on paper or electronically). The first list you request within a 12-month period will be free. For additional lists, we may charge you for the costs of providing the list. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.
Right to Request Restrictions. You have the right to request a restriction or limitation on our use or disclosure of information about you for treatment, payment or health care operations. You also have the right to request a limit on the information we disclose about you to someone who is involved in your care or the payment for your care, like a family member or friend. (For example, you could ask that we not use or disclose information about a surgery you had, or you could ask that information about you not be included in the facility directory.)
If you paid out-of-pocket for a specific item or service, you have the right to request that PHI relating to such item or service not be disclosed to a health plan for purposes of payment or health care operations, and we must honor such a request. However, we are not required to agree to other restrictions that you request. If we do agree to a requested restriction, we will comply with your request unless the information is needed to provide you with emergency treatment.
If you want to request a restriction, you must complete a "Request to Invoke/Revoke Restrictions on Disclosure of Protected Health Information" form available at JDC or submit your request in writing to the Privacy Officer. The written request must include (1) what information you want to limit; (2) whether you want to limit our use, disclosure or both; and (3) to whom you want the limits to apply (for example, disclosures to your spouse or other family members).
Right to Request Confidential Communications.
You have the right to request that we communicate with you in a certain way or at a certain location. (For example, you can ask that we only contact you at work or by mail, or that we not leave messages on answering machines).
If you want to request confidential communications, contact the Privacy Officer in writing, by telephone or during the registration process. We will not ask the reason for your request. We will accommodate all reasonable requests. Your request must include the address and/or telephone number where you want to be contacted.
Right to Receive Notice of a Breach. We are required to notify you by first class mail or by e-mail (if you have indicated a preference to receive information by e-mail), of any breaches of "Unsecured PHI" as soon as possible, but in no event later than 60 days following the discovery of the breach. "Unsecured PHI" is not secured through the use of a technology or methodology identified by the Secretary of the U.S. Department of Health and Human Services to render the PHI unusable, unreadable and undecipherable to unauthorized users. In the event that such a breach occurs, we will notify the Secretary of the Department of Health and Human Services, and if such breach affects 500 or more individuals, we will notify local media outlets and the Secretary of the Department of Health and Human Services of the breach.
Right to a Paper Copy of This Notice. You have the right to a paper copy of this notice at any time. You may obtain a copy of this notice at our website, www.JDCPediatrics.com, or at any JDC office.