REPARO
HEALTH

HIPAA Notice of Privacy Practices

Effective Date: September 30th, 2024

THIS NOTICE DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED, AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Scope of Notice

This Notice of Privacy Practices ("Notice") applies to all Protected Health Information (PHI) handled or transmitted by Reparo Health Medical Services, P.A. ("we," "us," "our"). PHI includes any identifiable information regarding your physical or mental health, the provision of care, or payment for health services. This may include treatment details, diagnostic tests, images, and other health-related data.

Our Responsibilities

We value your privacy. We are required by law to maintain the confidentiality of your PHI and to provide you with this Notice detailing our legal duties and privacy practices. In the event of a breach of unsecured PHI, we are also required to notify affected individuals.

We must follow the privacy practices outlined in this Notice while it is in effect. This Notice will be updated when changes occur.

How We May Use and Disclose Your PHI

We may use or share your PHI in the following situations without your written authorization. These categories describe different ways we may use and disclose PHI, although not every possible use or disclosure is listed.

Treatment

We may use and share your PHI to provide and coordinate your treatment. For example, your therapist may share information with other providers who are treating you to ensure the best care.

Payment

We may use and disclose your PHI to obtain payment for the services we provide. This includes activities such as billing, collections, and verifying insurance coverage. For example, we may send claims to your insurance provider containing your treatment information.

Healthcare Operations

Your PHI may be used for our internal healthcare operations. This includes quality improvement, staff training, licensing activities, and customer service. For example, we may use your information to assess the quality of our services or to send you appointment reminders or information about treatment options.

Business Associates

We may share your PHI with third-party service providers, known as business associates, to perform services on our behalf. Business associates are required by contract to safeguard your PHI and follow privacy regulations.

Health Information Exchanges (HIEs)

We may participate in HIEs, which allow healthcare providers to access and share your PHI electronically for treatment, payment, and operations.

Individuals Involved in Your Care or Payment for Your Care

We may share your PHI with family members, friends, or others involved in your care, as permitted by law or with your permission. We may also share your PHI with a public or private agency to assist in notifying others of your condition in the event of an emergency or disaster.

Public Health and Legal Obligations

We may disclose your PHI as required by law or for public health reasons, such as to prevent or control disease or to report abuse, neglect, or domestic violence. We may also share information with law enforcement in response to legal processes, such as subpoenas or court orders.

Health Oversight

Your PHI may be disclosed to health oversight agencies for activities such as audits, inspections, and licensing.

Serious Threats to Health or Safety

We may disclose PHI to prevent or reduce serious threats to your health or the safety of others.

Specialized Government Functions

PHI may be shared for specialized government functions, such as military and veterans’ activities or for national security.

Workers' Compensation

We may disclose your PHI as authorized by laws governing workers' compensation or similar programs.

Research

We may use or disclose your PHI for research purposes, subject to special approval processes. For example, we may share your PHI with researchers when an Institutional Review Board (IRB) or Privacy Board has reviewed the research proposal and ensured your privacy is protected. Research activities could involve health improvement initiatives, and in certain cases, PHI can be used without written consent if safeguards are in place.

Limited Data and De-identified Data

We may create a "limited data set" by removing direct identifiers from your PHI and use or disclose this information for research, public health activities, or healthcare operations, provided that the recipient signs a data use agreement. We may also completely de-identify your PHI, removing all identifying details, and use or disclose this de-identified data for purposes permitted by law, such as research and analysis.

Your PHI Rights

You have specific rights regarding your health information:

Right to Access

You can request to see or get copies of your PHI. This includes receiving electronic records. We may charge a fee for the cost of copies or mailing. In certain cases, we may deny your request, but you can request a review of the denial.

Right to Amend

If you believe your PHI is incorrect or incomplete, you may request an amendment. We may deny the request under certain circumstances, but you will receive an explanation in writing.

Right to an Accounting of Disclosures

You can request a list of certain disclosures of your PHI that were made without your authorization, such as those made for public health or law enforcement purposes.

Right to Request Restrictions

You may request that we limit the use or disclosure of your PHI. While we will consider your request, we are not required to agree unless the restriction involves disclosure to a health plan for payment or healthcare operations for services paid for out of pocket.

Right to Confidential Communications

You can request that we communicate with you about your PHI in a specific way (e.g., via a specific email or mailing address). We will accommodate reasonable requests.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice, even if you have agreed to receive it electronically.

Other Uses and Disclosures

In situations not covered by this Notice, we will obtain your written authorization before using or disclosing your PHI. You may revoke that authorization in writing at any time.

Changes to This Notice

We reserve the right to change this Notice at any time. When changes are made, we will update this document and post the revised Notice on our website. The new Notice will apply to all PHI we maintain, including information gathered before the changes.

Complaints and Contact Information

If you believe your privacy rights have been violated, or if you have any questions about this Notice, you can contact our Privacy Officer, Neha Vadalia, at hello@reparohealth.com.

You also have the right to file a complaint with the Office for Civil Rights, U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.