HIPAA Notice of Privacy Practices

HIPAA Notice of Privacy Practices

Collo Rosso Dermatology is committed to protecting the privacy of your Protected Health Information (PHI) as required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations. This Notice of Privacy Practices describes how we may use and disclose your PHI and how you can exercise your rights regarding that information.

Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your Protected Health Information.
• Provide you with notice of our legal duties and privacy practices regarding your PHI.
• Abide by the terms of the Notice currently in effect.
• Notify you if a breach of your PHI occurs.

How We May Use and Disclose Your PHI

Treatment. We may use and disclose your PHI to provide, coordinate, or manage your healthcare and any related services. For example, we may share information with other providers involved in your care.

Payment. We may use and disclose your PHI to obtain payment for services. For example, we may submit claims to your insurance company, which may include information about your diagnosis and treatment.

Healthcare Operations. We may use and disclose your PHI for our internal healthcare operations, including quality assessment, staff training, and compliance activities.

Required by Law. We may disclose your PHI when required by federal, state, or local law, including disclosures to public health authorities, law enforcement, or in response to a court order.

Other Permitted Uses. We may use or disclose your PHI for purposes including: abuse or neglect reporting, health oversight activities, research (with your authorization or under a waiver of authorization), workers' compensation, and as otherwise permitted by law.

Uses and Disclosures Requiring Your Authorization

The following uses and disclosures will be made only with your written authorization:

• Most uses and disclosures of psychotherapy notes.
• Uses and disclosures of PHI for marketing purposes.
• Disclosures that constitute a sale of PHI.
• Other uses and disclosures not described in this Notice.

You may revoke an authorization at any time in writing, except to the extent that we have already acted in reliance on that authorization.

Your Rights Regarding Your PHI

• Right to Access. You have the right to inspect and obtain a copy of your PHI maintained in our records, subject to certain exceptions.
• Right to Amend. You have the right to request that we amend your PHI if you believe it is inaccurate or incomplete.
• Right to an Accounting of Disclosures. You have the right to request a list of certain disclosures of your PHI we have made.
• Right to Request Restrictions. You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations.
• Right to Confidential Communications. You have the right to request that we communicate with you in a specific way or at a specific location.
• Right to Receive a Paper Copy of This Notice. You have the right to receive a paper copy of this Notice upon request, even if you have agreed to receive it electronically.
• Right to File a Complaint. If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Changes to This Notice

We reserve the right to change the terms of this Notice at any time, effective for PHI we already maintain about you as well as any PHI we receive in the future. We will post the current Notice in our office and on our website.