NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
WHO THIS NOTICE APPLIES TO
This Notice describes Columbia St. Mary’s Inc.’s (“Columbia St. Mary’s”) practices, including the practices of:
Columbia St. Mary’s Hospital Milwaukee, Inc.
Sacred Heart Rehabilitation Institute, Inc.
Columbia St. Mary’s Hospital Ozaukee, Inc.
Madison Medical Affiliates, Inc.
All Columbia St. Mary’s Community Physicians Clinics
Members of Columbia St. Mary’s medical staff and other healthcare providers granted privileges to provide patient care at Columbia St. Mary’s, and
All employees, staff and other Columbia St. Mary’s workforce members, including volunteers.
Columbia St. Mary’s takes the privacy of the health information our patients entrust to us seriously, as both an ethical and a legal obligation. We are required by law to:
Maintain the privacy of your health information.
Provide you with this Notice of Privacy Practices (“Notice”), which tells you about our legal duties and privacy practices with respect to your health information.
Notify affected individuals following a breach of unsecured health information.
This Notice summarizes our duties and your rights concerning your health information. We are required to abide by the terms of our Notice that is currently in effect.
USES AND DISCLOSURES OF HEALTH INFORMATION WE MAY MAKE WITHOUT WRITTEN AUTHORIZATION
The following categories describe different ways Columbia St. Mary’s may use and disclose your health information without your written authorization. Not every use or disclosure is listed. Health information is most often used and disclosed to provide treatment, to obtain payment for treatment, or for health care operations. References to “you” and “your” information include your child’s information, when appropriate.
For Treatment. We may use and disclose your health information to provide treatment, health care or other related services. Your health information may be used by or disclosed to doctors, nurses, aides, technicians or other healthcare providers or employees who are involved in your care. Additionally, we may use or disclose your health information to manage or coordinate your treatment, health care or other related services. For example, we may use or disclose health information about you when you are referred to a specialist for care or when we send a prescription to a pharmacy to be filled for you.
For Payment. We may use and disclose your health information to bill and collect for the treatment and services we provide to you. We may send your health information to your insurance company or other third party payer for payment purposes. For example, we may use and disclose health information about you in order to send claims to your HMO for payment or to find out whether a proposed treatment is covered by your insurer.
For Health Care Operations. We may use and disclose your health information for health care operations. These uses and disclosures are necessary to run Columbia St. Mary’s and to maintain and improve the quality of health care we provide to our patients. For example, we may use and disclose health information about you in order to renew our governmental licenses or other accreditations, and for quality improvement activities and teaching purposes.
Hospital Directory. If you are a patient at one of our hospitals, we may include certain limited information about you in our hospital directory. This information includes your name, location in the hospital, your general condition (e.g., fair, stable, etc.) and your religious affiliation. The directory information may be disclosed to people who ask for you by name, except for your religious affiliation, which may only be disclosed to clergy members. You have the right to not have your information included in our hospital directory (“opt-out”). To opt-out of our hospital directory, we ask that you make this request during patient registration.
Individuals Involved in Your Care or Payment for Your Care. We may disclose to your family member, relative, close personal friend or other person identified by you, health information that is directly relevant to that person’s involvement with your care or payment for your care. We will not share this information with these individuals if we are aware of your desire not to have this information shared.
Fundraising. We may use or disclose your health information for the purpose of raising funds to help support Columbia St. Mary’s mission. You have the right to opt-out of receiving fundraising communications.
Research. Under certain circumstances, we may use and disclose your health information for research purposes. For example, a research project may involve comparing the health and recovery of all individuals who receive one medication to those who receive another. All research projects are subject to a special approval process.
Immunization Records. We may disclose your immunization records to a school where you are or will be a student, if the school is required by law to have proof of immunizations for admission purposes.
For Public Health Purposes. We may disclose your health information for public health activities. Public health activities include, for example: preventing and controlling disease, injury or disability; reporting births and deaths; and reporting defective medical devices or problems with medications.
About Victims of Abuse. We may disclose your health information to notify the appropriate government authority if we believe that you have been the victim of abuse, neglect or domestic violence. We will only make this disclosure if you agree, or when required or authorized by law.
Health Oversight Activities. We may disclose your health information to a health oversight agency for health oversight activities authorized by law. These activities include audits, investigations, licensure and disciplinary actions, and related activities which are necessary to monitor the health care system, governmental benefit programs, and compliance with civil rights laws.
Judicial and Administrative Proceedings. We may disclose your health information in response to a subpoena, court order, or administrative order, if certain requirements are met.
Law Enforcement. We may release your health information to law enforcement if the disclosure is required by law, necessary to identify or locate a suspect or missing person, about criminal conduct at a Columbia St. Mary’s facility, about a victim of crime under certain circumstances, and in certain emergency situations.
To Avert a Serious Threat to Health or Safety. We may use and disclose your health information when we believe it is necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person. Any disclosure would only be to someone able to help prevent or lessen the threat, or to law enforcement authorities.
Coroner, Medical Examiners, and Funeral Directors. We may disclose your health information to a coroner or medical examiner for the purpose of identifying a deceased person, determining a cause of death, or other duties authorized by law. We may disclose your health information to a funeral director, consistent with law, to permit the funeral director to carry out his/her duties.
Organ Donation Purposes. We may disclose your health information to organ procurement organizations and others engaged in procurement, banking or transplantation of cadaveric organs, eyes, or tissue, as necessary to facilitate organ or tissue donation and transplantation.
Military and Veterans. If you are a member of the armed forces, we may release your health information as required by military command authorities. We may also release health information about foreign military personnel to the appropriate foreign military authority.
National Security and Intelligence Activities. We may release your health information to authorized federal officials for intelligence, counterintelligence and other national security activities as authorized by law.
Protective Services for the President and Others. We may disclose your health information to authorized federal officials so they may provide protection to the President or other authorized persons, or for the conduct of special investigations authorized by law.
Inmates. If you are an inmate or in the custody of a correctional institution or law enforcement, we may disclose your health information to the correctional institution or law enforcement official for treatment and safety purposes.
Worker’s Compensation. We may disclose your health information as authorized by and to the extent necessary to comply with worker’s compensation laws or laws relating to similar programs.
As Required by Law. We may disclose your health information when required to do so by federal, state or local law.
HEALTH INFORMATION EXCHANGE
Columbia St. Mary’s participates in health information exchange organizations (“HIE”) that permits computer-based transfer of health information directly between healthcare providers at different locations and institutions to facilitate your care and treatment. If you do not want your information to be shared in this way, you can opt-out by requesting the appropriate form from your provider.
SPECIAL RESTRICTIONS UNDER STATE AND OTHER FEDERAL LAWS
We will also comply with all other applicable state and federal laws. For example, under state law, there are more limits on when HIV and AIDS information may be disclosed. Under other federal law, there are more limits on when drug or alcohol abuse treatment information may be disclosed. We abide by all applicable state and federal laws.
USES AND DISCLOSURES THAT REQUIRE YOUR WRITTEN AUTHORIZATION
Any other uses and disclosures of health information not covered by this Notice or the laws that apply to us will be made only with your authorization. An authorization is a special written permission from you that grants authority to Columbia St. Mary’s to use or disclose your health information.
We must obtain your authorization to use or disclose psychotherapy notes. Psychotherapy notes may only be used for limited purposes, such by the treating professional. Disclosures are permitted only as required by law, for certain health oversight activities, or to avert a serious threat to health or safety.
We must obtain your authorization to use or disclose health information for marketing purposes, or for disclosures that constitute the sale of health information.
If you provide us an authorization to use or disclose your health information, you may revoke that authorization, in writing, at any time. If you revoke your authorization, we will no longer use or disclose health information about you for the reasons covered by your authorization.
YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
You have the following rights regarding the health information we maintain about you. To exercise any of these rights, you must submit a written request to your Columbia St. Mary’s Provider.
Right to Request Restrictions. You have the right to request additional restrictions or limitations on the health information we use or disclose about you for treatment, payment or health care operations. We are not required to agree to your requested restrictions except in the limited situation in which you (or someone on your behalf) pays for an item or service out-of pocket and you request that information concerning such item or service not be disclosed to your health plan. If we do agree to your requested restrictions, we will comply with your request unless the information is needed to provide you with emergency medical treatment.
Right to Request Confidential Communications. Typically, we communicate with you regarding your health care either by calling your home phone or sending mail to your home address. You have the right to request that we communicate with you in an alternative way or at an alternative location. We will accommodate reasonable requests.
Right to Access. You have the right to access your health information by requesting to inspect and/or obtain a copy of your health information, with limited exceptions. We ask that your request be made in writing. You may request the copy of your health information be provided in a summary format. You may also request the copy be provided on paper (“hard copy”) or in an electronic form or format. We will also transmit a copy of your health information to another person designated by you in writing. We may charge reasonable fees for copies.
Right to Request Amendments. You may request that we amend your health information. To request an amendment, we ask that your request be made in writing. In addition, you must provide a reason that supports your request. We may deny your request in certain circumstances, such as if the information was not created by us, or if we believe the information in your record is accurate and complete. If we deny your request, you may appeal the denial.
Right to an Accounting of Disclosures. You have the right to request a list of certain disclosures that we have made of your health information. Your request must state a time period which may not be longer than six years. The first accounting of disclosures you request within a twelve (12) month period will be provided to you free of charge. We may charge a reasonable costbased fee for all subsequent requests during that twelve (12) month period.
Right to Notification of a Breach. We must notify you if your unsecured protected health information has been the subject of a breach.
Right to a Paper Copy of this Notice. You may ask us to give you a paper copy of this Notice upon request. Even if you have agreed to receive this Notice electronically, you are still entitled to a paper copy of this Notice.
CHANGES TO THIS NOTICE
We reserve the right to make changes to this Notice at any time. We reserve the right to make the revised Notice effective for health information we already have, as well as any information we receive or create in the future. The Notice will contain the current effective date. We will post a copy of the current Notice in our locations and on our website. The Notice is also available to you upon request.
If you believe your privacy rights have been violated, you may file a complaint with Columbia St. Mary’s or with the Secretary of the Department of Health and Human Services. To file a complaint with Columbia St. Mary’s, please notify our Privacy Officer. We will not retaliate against you for filing a complaint. All complaints must be submitted in writing.
If you have any questions about this Notice, please contact:
Columbia St. Mary’s
Attn: Privacy Officer
2320 North Lake Drive, Milwaukee, WI 53211
(414) 291-1893 (Privacy Hotline)