PRIVACY POLICY
Our Privacy Commitment to You
At Cerebral Palsy of Westchester (CPW), we understand that information about you and your family is personal. We are committed to protecting your privacy and that of your records. Information is shared only when authorized, when necessary for treatment, payment, or health care operations or as mandated by State or Federal Law. In accordance with the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health Act (HITECH Act), our privacy commitment to you is:
- All people involved in your care will protect your privacy and information will be shared only with the persons/organizations that you have authorized to view the information or for purposes permitted or required by law.
- Protected Health Information (PHI) includes records we keep or create that are related to your health care or treatment. This includes your past, present or future information, treatment plan, name, address, birth date, social security number, payment for services and other identifying information.
- CPW will comply with the breach notification requirement of the HITECH Act and will notify you of a breach of unsecured health information.
This privacy notice describes how your health information may be used and disclosed, and how you may access your information. Please review it carefully. This privacy notice is effective as of September 23, 2013.
CPW’s Responsibility for Your Information
CPW is required by law to:
- Maintain the privacy of your records.
- Give you notice of our legal duties and practices concerning your health information.
- Follow the rules contained in this notice.
- Based on our right to revise the privacy notice, CPW will inform you of any material changes in privacy practice or your rights.
- You may obtain a copy of the most current privacy notice at cpwestchester.org or by calling CPW.
Your Health/Clinical Information Rights
You have the right to:
- Review your health records and obtain a copy of the record. We may charge a reasonable fee for the copies not to exceed $0.75 per page. We may deny your request under limited circumstances. If you are denied you may request a review by the CPW Executive Director.
- You may request that CPW change or amend your health information if you believe it is incorrect or incomplete. However, CPW may deny this request if we believe that the information is accurate. If the request is denied you may file a statement of disagreement with us, and we may prepare a rebuttal to your statement and will give you a copy. If the amendment is approved, your record will be changed, and we will inform others that need to be made aware. Information in reports not created by CPW may not be changed.
- You may request to receive confidential communication from us. We will accommodate reasonable requests. We my condition this accommodation by asking for information on how payment will be handled or specifying an alternative address or method of contact.
- You have the right to restrict use or disclosure of your health information. You may ask us not to use your information for treatment, payment, or health care operations. You may request that any part of your information not be disclosed to family or friends involved in your care. CPW is not required to agree to a restriction you request, except as required by law or related to your health plan when the health service is paid in full and out-of-pocket by yourself or someone else. If CPW believes that it is in your best interest to use/disclose your information, it will not be restricted. If CPW agrees with the restriction we will follow the directive of that restriction unless it is needed to provide emergency treatment. Restriction must be requested in writing.
- If the organization uses or maintains an electronic health record, you have the right to obtain such information in electronic format.
- You may request a list of certain disclosures CPW has made of your health information. The list of disclosures will not include disclosures for treatment, payment, or health care operations or disclosures made to yourself or disclosures to family members or friends involved in your care, per your request or notification purposes.
- You have a right to receive a paper copy of the CPW privacy policy.
Uses and Disclosures that Require Your Agreement and Authorization
- For marketing purposes or for purposes involving the sale of your protected health information
- Specific authorization is required for release of HIV/AIDS, mental health and psychotherapy notes and information
How CPW Uses and Discloses Health Care Information
CPW may use and disclose health information without your permission only in the following situations:
- For treatment purposes within CPW and to outside health care providers who are part of your care. For example, CPW staff may discuss your health information with other individual health providers or organizations who are providing care, such as your physician or case manager.
- To provide health information needed to obtain payment for our services, such as making a determination of eligibility or coverage for insurance benefits. Bills may be sent to you or to third party payers such as insurance/health plans. This information may identify you, your diagnosis and service provided.
- For healthcare operations in support of the business activities of CPW. Activities may include, but not limited to, quality assessment, training and education, licensing, audits, contracted third party “business associates” that perform activities for CPW, to contact you related to CPW fundraising activity. You may opt out of receiving fundraising information by calling the CPW Privacy Officer.
- For public health purposes to a public health authority permitted by law to receive such information for the purpose of controlling disease, injury, or disability.
- When required by federal or state law or when requested by authorized federal officials for intelligence or national security, protective services to the President, or military command authorities.
- To the governmental agency authorized by state or federal law to receive information on possible domestic violence, child abuse or neglect.
- For judicial, and law administrative proceedings, in response to a court order or in response to other lawful process.
- To coroners, medical examiners, funeral directors, and organ donation organizations so they may carry out their duties as authorized by law. We may disclose such information in reasonable anticipation of death.
- Workers’ Compensation cases may require the disclosure of health information to comply with law.
- If authorized by law, to a person who may have been exposed to a communicable disease or at risk of contracting or spreading the disease.
- To a health oversight agency for activities authorized by law, such as audits, investigations, and inspections.
- To law enforcement for suspicious death, pertaining to crime victims, in the event of a crime at CPW, medical emergency related to a possible crime, other legal processes required by law.
- For criminal activity to prevent or lessen the threat to health/safety of a person or the public or to identify and apprehend a person.
- To a person or company required by the Food & Drug Administration to report adverse effects, product defects, to enable product recalls, to report biologic product deviations or for other FDA activities required by law.
- To the extent that it is required by law. You will be notified as required by law of any such uses/disclosures.
- To the Department of Health & Human Services to determine our compliance with law section 164.500.
Permitted & Required Uses and Disclosures That May Be Made with Your Authorization or Opportunity to Object
For all other types of uses and disclosures not described in this notice, CPW will use or disclose health information only with a written authorization signed by you or your authorized personal representative.
- To a family member, relative, close friend or other person you identify that is involved in your healthcare
- To notify or assist in notifying a family member or personal representative or other person responsible for your care, location, general condition or passing.
- To an authorized public or private entity to assist in disaster relief and to coordinate use/disclosure to family or others involved in your care.
You may revoke your authorization at any time, but you must do so in writing. If you revoke your authorization in writing, we will no longer use or disclose your information for the reasons stated in the authorization. We cannot retrieve any disclosures made prior to revoking your authorization. We must also retain your health information that indicated the services we have provided to you.
If you cannot give permission or object to a disclosure CPW may release health information if we determine it is in your best interest based on our professional judgment.
CPW Privacy Coordinator
Questions or concerns about CPW privacy policy, privacy practices, access to health information or this notice may be forwarded to the Privacy Coordinator at (914) 937-3800 ext.721. Written correspondence about these policies may be sent to: Privacy Coordinator, Cerebral of Westchester, 1186 King Street, Rye Brook, NY 10573.
Complaints
If you believe your privacy rights have been violated, you may file a complaint on the Cerebral Palsy of Westchester Hotline at (914) 937-3800 ext. 210. Written complaints may be sent to:
CPW Privacy Coordinator
Cerebral Palsy of Westchester
1186 King Street
Rye Brook, NY 10573
You may contact the Department of Health and Human Services at 877-696-6775 or at:
Department of Health and Human Services
200 Independence Ave. SW
Washington, DC 20201
You may file a grievance with the Office of Civil Rights by calling 866-627-7748 or 866-788-4989 (TTY), or at the following address:
Office of Civil Rights Region II
Federal Building
26 Federal Plaza, Room 3312 New York, NY 10278
All complaints made by telephone must be followed with a written complaint. You will NOT be penalized for filing a complaint.