Notice Of Privacy Rights
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY
The Health Insurance Portability & Accountability Act of 1996 (HIPAA) is a federal program that requires that all medical records and other individually identifiable information used or disclosed by us in any form, whether electronically, on paper, or orally, are kept properly confidential. This act gives you, the patient, the right to understand and control how your personal or protected health information (“PHI”) is used. HIPAA provides penalties for covered entities that misuse personal health information.
As required by HIPAA, we have prepared this explanation of how we are required to maintain the privacy of your health information and how we may disclose your personal information.
We may use and disclose your medical records only for each of the following purposes: treatment, payment, and health care operations.
-
Treatment means providing, coordinating, or managing health care and related services by one or more health care providers. An example of this would include referring you to a general ophthalmologist.
-
Payment means such activities as obtaining reimbursement for services, confirming coverage, billing or collection activities and utilization review. An example of this would be sending a bill for your visit to your insurance company and/or verifying coverage prior to surgery.
-
Health care operations include the business aspects of running our practice, such as conducting quality assessment and improving activities, auditing functions, cost management analysis, and customer service. An example of this would be new patient surveys.
The practice may also disclose your PHI for law enforcement and other legitimate reasons although we shall do our best to assure its continued confidentiality to the extent possible.
We may also create and distribute de-identified health information by removing all references to individually identifiable information.
The practice is not permitted to disclose reproductive health information for the purpose of investigating or imposing liability on someone for the mere act of seeking lawful reproductive healthcare. Any person who is requesting PHI on reproductive healthcare must meet the requirements including the valid attestation or the practice will not disclose the information
We may contact you, by phone or in writing, to provide appointment reminders or information about treatment alternatives or other health-related benefits and services, in addition to other fundraising communications, that may be of interest to you. You do have the right to “opt out” with respect to receiving fundraising communications from us.
The following use and disclosures of PHI will only be made pursuant to us receiving a written authorization from you:
- Most uses and disclosure of psychotherapy notes;
- Uses and disclosure of your PHI for marketing purposes, including subsidized treatment and health care operations;
- Disclosures that constitute a sale of PHI under HIPAA; and
- Other uses and disclosures not described in this notice.
You may revoke such authorization in writing, and we are required to honor and abide by that written request, except to the extent that we have already taken actions relying on your authorization.
You have the following rights with respect to your PHI.
-
The right to request restrictions on certain uses and disclosures of PHI, including those related to disclosures of family members, other relatives, close personal friends, or any other person identified by you. We are, however, not required to honor a request restriction except in limited circumstances which we shall explain if you ask. If we do agree to the restriction, we must abide by it unless you agree in writing to remove it.
-
The right to reasonable requests to receive confidential communications of PHI by alternative means or at alternative locations.
-
The right to request electronic copies of your PHI if it’s on an electronic health records (EHR) system.
-
The right to inspect and copy your PHI.
-
The right to amend your PHI.
-
The right to receive an accounting of disclosures of your PHI.
-
The right to obtain a paper copy of this notice from us upon request.
-
The right to be advised if your unprotected PHI is intentionally or unintentionally disclosed.
If you have paid for services “out of pocket”, in full, and you request that we do not disclose PHI related solely to those services to a health plan, we will accommodate your request, except where we are required by law to make a disclosure.
We are required by law to maintain the privacy of your protected health information and to provide you with notice of our legal duties and privacy practices with respect to PHI.
This notice is effective as of February 1, 2025. It has been revised from the original of March1, 2024, notice. It is our intention to abide by the terms of the Notice of Privacy Practices and HIPAA Regulations currently in effect. We reserve the right to change the terms of our Notice of Privacy Rights and to make the new notice provision effective for all PHI that we maintain. We will post and you may request a written copy of the revised Notice of Privacy Practices from our office.
You have recourse if you feel that your protections have been violated by our office. You have the right to file a formal, written complaint with our office and the Department of Health and Human Services, Office of Civil Rights. We will not retaliate against you for filing a complaint.
Please contact us for more information by
asking to speak to our HIPAA Privacy Officer or for
written inquiries, note “Attention HIPAA Privacy Officer.”
Illinois Retina Associates, Compliance Officer Voicemail And Hotline
312.409.4730
For more information about HIPAA or to file a complaint:
The U.S. Department of Health & Human Services
Office of Civil Rights
200 Independence Avenue SW
Washington, DC 20201
877.696.6775 Toll Free