HIPAA Notice of Privacy Practices

How we may use and disclose your information

Treatment. We may use or disclose PHI to provide, coordinate, or manage your care. For example, we may share relevant information with a specialist, pharmacy, laboratory, or another treating professional involved in your care.

Payment. We may use or disclose PHI for lawful payment-related activities. For example, even though Caventa does not bill insurance for covered membership services, we may use information to collect patient payments or facilitate an insurance prior authorization for a medication or referral when needed for your care.

Health care operations. We may use or disclose PHI to operate the Practice. For example, we may use information for quality improvement, compliance, auditing, training, records management, security, and business planning.

Other permitted or required disclosures. As permitted or required by law, we may use or disclose PHI for public health and safety activities, health oversight, judicial or administrative proceedings, law enforcement, workers' compensation, organ or tissue donation, research under applicable legal requirements, to avert a serious threat to health or safety, and for other purposes authorized or required by law. More protective federal or state law will control when applicable.

Business associates. When a vendor is a HIPAA business associate, we use a compliant written business-associate arrangement before the vendor creates, receives, maintains, or transmits PHI for Caventa, unless an exception applies.

Your choices

In certain situations, you may tell us your preferences about sharing information, including certain communications with family, friends, or others involved in your care. We will follow your choice when HIPAA or other applicable law requires us to do so.

Uses and disclosures requiring written authorization

We will obtain your written authorization when HIPAA requires it, including for most uses or disclosures of psychotherapy notes (if any), the sale of PHI, and marketing activities that require authorization. Other uses and disclosures not described in this Notice will be made only with your written authorization. You may revoke an authorization prospectively in writing, subject to actions already taken in reliance on it.

Substance-use-disorder records

To the extent Caventa creates or maintains records protected by 42 C.F.R. Part 2, those records receive the additional protections required by federal law. Substance-use-disorder treatment records received from a Part 2 program, or testimony relaying their content, may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless permitted by your written consent or by a qualifying court order accompanied by the legal process required by Part 2.

Your rights

• Inspect or obtain an electronic or paper copy of health information in our designated record set, subject to applicable exceptions. Contact the Privacy Officer or use the patient portal to make a request.
• Ask us to amend health information you believe is incorrect or incomplete.
• Request an accounting of certain disclosures.
• Request restrictions on certain uses or disclosures. We generally are not required to agree, except that if you pay for an item or service out of pocket in full and ask us not to disclose information about that item or service to a health plan for payment or health care operations, we will honor the restriction when HIPAA requires it.
• Request confidential communications by an alternative method or at an alternative location.
• Obtain a paper copy of this Notice even if you agreed to receive it electronically.
• Complain to Caventa or the U.S. Department of Health and Human Services, Office for Civil Rights, without retaliation.

State-law protections

Some states impose additional restrictions on particular health records or disclosures. Caventa will comply with a more protective state requirement when it applies. This may include, for example, Minnesota health-record consent requirements, Florida medical-record confidentiality rules, and Texas medical-privacy and electronic-health-record requirements.

Our responsibilities

• We must maintain the privacy and security of your PHI and give you this Notice describing our legal duties and privacy practices.
• We must follow the terms of the Notice currently in effect.
• We will notify affected individuals when required following a breach of unsecured PHI.
• We may change this Notice and make the new provisions effective for all PHI we maintain, including information created or received before the change. A current Notice will be posted on our website and made available upon request.

Complaints and contact

You may file a privacy complaint with Caventa by contacting the Privacy Officer below. You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. Caventa will not retaliate against you for filing a complaint.

Privacy Officer: Kyle Kettler, M.D.
Email: info@caventahealth.com
Phone: (612) 662-0095
Website: caventahealth.com/legal