HIPAA Notice of Privacy Practices.

Our Commitment to Your Privacy

Northwest Suburban Medical Group is committed to protecting the privacy of your health information. Federal law (the Health Insurance Portability and Accountability Act of 1996, or “HIPAA”) requires us to maintain the privacy of your Protected Health Information (PHI), provide you with this notice of our legal duties and privacy practices, and follow the terms of this notice.

How We May Use and Disclose Your Health Information

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. For example, we may share your information with a specialist to whom we refer you or with a hospital where you are admitted.

Payment

We may use and disclose your PHI to obtain payment for healthcare services. This includes billing your insurance company, verifying coverage, and collecting co-payments.

Healthcare Operations

We may use and disclose your PHI for our healthcare operations, such as quality improvement activities, training programs, credentialing, and compliance audits.

Other Permitted Uses

• As required by federal, state, or local law
• For public health activities (disease reporting, FDA safety reporting)
• To report suspected abuse, neglect, or domestic violence
• For health oversight activities by government agencies
• In response to court orders or lawful subpoenas
• To law enforcement under limited circumstances
• To coroners, funeral directors, and organ procurement organizations
• For workers' compensation claims

Uses Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this notice, including:

• Marketing purposes
• Sale of your health information
• Most uses of psychotherapy notes

You may revoke any authorization in writing at any time.

Your Rights Regarding Your Health Information

• Right to Access: You have the right to inspect and obtain a copy of your PHI maintained by our practice.
• Right to Amend: You may request that we amend your PHI if you believe it is incorrect or incomplete.
• Right to an Accounting of Disclosures: You may request a list of disclosures of your PHI that we have made for purposes other than treatment, payment, or healthcare operations.
• Right to Request Restrictions: You may request that we restrict certain uses or disclosures of your PHI, though we are not required to agree to such requests except in limited circumstances.
• Right to Request Confidential Communications: You may request that we communicate with you by alternative means or at alternative locations.
• Right to a Paper Copy: You have the right to obtain a paper copy of this notice upon request.

Breach Notification

We are required to notify you if a breach of your unsecured PHI occurs, as defined by HIPAA and the HITECH Act.

Changes to This Notice

We reserve the right to change this notice and make the revised notice effective for PHI we already have as well as information we receive in the future. The current notice will always be posted on our website and available at our office.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

• Our Privacy Officer at the contact information below
• The U.S. Department of Health and Human Services Office for Civil Rights

You will not be retaliated against for filing a complaint.

Contact Information