Our Privacy Obligations
We are required by law to maintain the privacy of your health information (“Protected Health Information” or “PHI”), to provide you with this Notice describing our legal duties and privacy practices related to your PHI, and to notify you, when required by law, in the event a breach occurs that may have compromised the privacy or security of your information. Additionally, when we use or disclose your PHI, we are required to comply with the terms of this Notice (or another notice in effect at the time of the use or disclosure).
Our Uses and Disclosures
How do we typically use or share your health information?
We typically use or share your health information in the following ways.
To Treat You
We can use your health information and provide it to others who are treating you.
Example: a doctor treating you for an injury asks another one of your doctors about your overall health condition.
In some cases, providers at other health care organizations may be able to electronically access your health information created or maintained by us, either through a secure connection or through a secure network for the transmission of health information. All of these providers are required to take steps to protect the confidentiality of your information.
To Run Our Organization
We can use and share your health information to run our organization, improve your care, and contact you when necessary.
Example: we use health information about you to assess the quality of our services and the care provided.
To Bill For Our Services
We can use and share your information to bill and collect payment from health plans or other entities, including physician groups, accountable care organizations, and individuals, such as family members, who are responsible for paying for your health care and may request information about your care in order to provide payment.
Example: we give information about you to your health insurance plan so it will pay for our services.
How else can we use or share your health information?
We are allowed or required to share your information in other ways. Below is a list of those circumstances when we may share your information without your consent.
Public Health. To report health information to public health authorities for the purpose of preventing or controlling disease, injury or disability:
To report child abuse and neglect to public health authorities or other government authorities authorized by law to receive such reports;
To report information about products and services under the jurisdiction of the U.S. Food and Drug Administration;
To alert a person who may have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading a disease or condition; and
To report information to your employer as required under laws addressing work-related illnesses and injuries or workplace medical surveillance.
Victims of Abuse, Neglect or Exploitation. If we reasonably believe you are a victim of abuse, neglect or exploitation, we may disclose your PHI to a governmental authority, including a social service or protective services agency, authorized by law to receive reports of such abuse, neglect or exploitation.
Health Oversight Activities. We may disclose your PHI to a health oversight agency that oversees the healthcare system and is charged with responsibility for ensuring compliance with the rules of government health programs, including but not limited to Medicare and Medicaid.
Judicial and Administrative Proceedings. We may disclose your PHI in the course of a judicial or administrative proceeding in response to a legal order or other lawful process.
Law Enforcement Officials. We may disclose your PHI to the police or other law enforcement officials as required or permitted by law or in compliance with a court order or a grand jury or administrative proceeding.
Decedents. We may disclose your PHI to a coroner or medical examiner as authorized by law.
Organ and Tissue Procurement. We may disclose your PHI to organizations that facilitate organ, eye or tissue procurement, banking, or transportation.
Research. We may use or disclose your PHI without your consent or authorization if an Institutional Review Board approves a waiver or authorization for disclosure.
Health or Safety. We may use or disclose your PHI to prevent or lessen a serious and imminent threat to a person’s or the public’s health or safety.
Specialized Government Functions. We may use and disclose your PHI to units of the government with special functions, such as the U. S. Military or the U.S. Department of State under certain circumstances.
Workers’ Compensation. We may disclose your PHI as authorized by and to the extent necessary to comply with state law relating to workers’ compensation or other similar programs.
As Required by Law. We may use and disclose your PHI when required to do so by any other law not already referenced in the preceding paragraphs.
Choose Someone to Act for you
If you have given someone medical power of attorney/health care proxy or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure the person has this authority and can act for you before we take any action.
For certain health information, you can tell us your choices about what we share. Please let us know if you have a clear preference for how we share your information in the situations described below.
You have both the right and the choice to tell us to:
Share information with your family, close friends, or others involved in your care
Share information in a disaster relief situation
If you are not present, unable to communicate, or in an emergency situation, we may exercise professional judgment to determine whether to disclose information with others involved in your care. We may also share your information when needed to lessen a serious and imminent threat to health and safety.
In these cases we never share your information unless you give us written permission:
Sale of your information
In addition, federal and state laws require your specific written authorization for the disclosure of certain information about you. This information includes psychotherapy notes as defined by federal law, communications with certain behavioral health professionals, communications between domestic violence victims and domestic violence counselors, and between sexual assault victims and sexual assault counselors; and information related to substance abuse treatment, HIV testing or results, treatment of sexually transmitted diseases and genetic testing or test results.
Your Rights Regarding Your Protected Health Information
For Additional Information or to File Complaint. If you desire additional information about your privacy rights, are concerned that we have violated your privacy rights, or disagree with a decision that we made regarding access to your PHI, you may contact our Privacy Office. You may also file written complaints with the Director, Office for Civil Rights of the U.S. Department of Health and Human Services. Upon request, the Medically Home Privacy Office will provide you with the correct address for the Director. We will not retaliate against you if you file a complaint with us or with the Office of Civil Rights.
Right to Request Restrictions. You may request restrictions on our use and disclosure of your PHI (a) for treatment payment, and healthcare operations; (b) to individuals (such as a family member, or other relative, close personal friend, or any other person identified by you) involved with your care or with payment related to your care; or (c) to notify or assist in the notification of such individuals regarding your location and general condition. While we will consider all requests for restrictions carefully, we are not required to agree to a requested restriction, except for requests to restrict disclosures to a health plan if the disclosure is for payment or health care operations and pertains solely to a health care item or service for which you have paid out of pocket in full, unless otherwise required by law. If you wish to request such a restriction, you must submit a written request to our Privacy Office.
Right to Receive Confidential Communications. You may request, and we will accommodate, any reasonable request for you to receive your PHI by alternative means of communication or at alternative locations.
Right to Revoke Your Authorization. You may revoke your authorization, your marketing authorization, or any written authorization related to your PHI, except to the extent that we have taken action in reliance upon it, by delivering a written revocation statement to the Privacy Office.
Right to Inspect and Copy Your Health Information. You may request access to your record file and billing records maintained by us in order to inspect and request copies of the records. Under limited circumstances, we may deny you access to a portion of your records. If you desire access to your records, please submit a written request to the Privacy Office. We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable cost-based fee in accordance with federal and state law.
Right to Amend Your Records. You have the right to request that we amend PHI maintained in your record file and billing records. If you desire to amend your records, please send a written request for the amendment, including the reason for the requested amendment, to the Privacy Office. We will comply with your request unless we believe that the information that would otherwise be amended is accurate and complete or other special circumstances apply.
Right to Receive an Accounting of Disclosures. Upon request, you may obtain an accounting of certain disclosures of your PHI made by us during any period of time prior to the date of your request provided such period does not exceed six (6) years. We will include all of the disclosures, except for those about treatment, payment and health care operations, and certain other disclosures (such as any you asked us to make). We will provide one accounting a year for free, but will charge a reasonable cost-based fee if you ask for another one within 12 months.
Right to Receive a Paper Copy of this Notice. Upon request, you obtain a paper copy of this Notice, even if you have agreed to receive such notice electronically.
CHANGES TO THE TERMS OF THIS NOTICE
We can change the terms of this notice, and the changes will apply to all informationwe have about you. The new notice will be available upon request and on our website at www.medicallyhome.com.
EFFECTIVE DATE OF THIS NOTICE
This notice is effective August 1, 2018.
You may contact the Privacy Office at the following address and phone numbers:
Medically Home Group, Inc.
133 Brookline Ave.
Boston MA 02215
 These Privacy Policies also apply to the physician groups for whom we provide certain management and administrative services, specifically, MHG Physician Services – Indiana, LLC, MHG Physician Services – New Jersey, LLC and MHG Physician Services – Massachusetts, PLLC.