HIPAA Policy

NOTICE OF PRIVACY PRACTICES

This notice applies to the privacy practices of MDwise, Inc. and describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Summary of Privacy Practices

We may use and disclose your medical information, without your permission, for treatment, payment, and health care operations activities and, when required or authorized by law, for public health and interest activities, law enforcement, judicial and administrative proceedings, research, and certain other public benefit functions.

We may disclose your medical information to your family members, friends, and others you involve in your health care or payment for health care, and to appropriate public and private agencies in disaster relief situations.

We will not otherwise use or disclose your medical information without your written authorization. You have the right to examine and receive a copy of your medical information, to receive an accounting of certain disclosures we may make of your medical information, and to request that we amend, further restrict use and disclosure of, or communicate in confidence with you about your medical information.

Please review this entire notice for details about the uses and disclosures we may make of your medical information, about your rights and how to exercise them, and about complaints regarding or additional information about our privacy practices. For the purpose of this notice, the terms medical information or health information shall include race, ethnicity, and language preference information collected by MDwise.

Our Legal Duty

MDwise uses many methods to protect your oral, written and electronic health information from illegal use or disclosure. We are required by law to:

Keep your health information private.
Provide you with this notice and follow the rules listed here.
Inform you if we cannot agree to limit how we share your information.
Agree to reasonable requests to contact you by alternative means or at alternative locations.
Get your written approval to share your health information for reasons other than those listed above and permitted by law.

MDwise employees and all the physician and providers in our network know your information is private and confidential. We use training programs for our employees and policies and procedures supported by management oversight to ensure that our employees know the procedures they need to follow to make sure that your information – whether in oral, written or electronic format – is secure and safeguarded. We also have vendors sign Business Associate Agreements that clearly outline their requirement to protect your information and our expectations concerning protecting your oral, written or electronic health information.

We reserve the right to change our privacy practices and the terms of this notice at any time, provided such changes are permitted by applicable law. We reserve the right to make the changes in our privacy practices and the new terms of our notice effective for all medical information that we maintain, including medical information we created or received before we made the changes. If we make a significant change in our privacy practices, we will change this notice and send you a new notice within sixty (60) days of the change.

You may request a copy of our notice at any time. For more information about our privacy practices, or for additional copies of this notice, please contact us using the information at the end of this notice.

Uses and Disclosures of Medical Information

We will use and disclose medical information about you for treatment, payment, and health care operations. For example:

Treatment
We may disclose your medical information, without your permission, to a physician or other health care provider to treat you.

Payment
We may use and disclose your medical information, without your permission, to determine eligibility, process claims, or make payment for covered services you receive under your benefit plan. Also, we may disclose your medical information to a health care provider or another health plan for that provider or plan to obtain payment or engage in other payment activities.

Health Care Operations
We may use and disclose your medical information, without your permission, for health care operations. Health care operations include, for example, health care quality assessment and improvement activities and general administrative activities.

We may disclose your medical information to another health plan or to a health care provider subject to federal privacy protection laws, as long as the plan or provider has or had a relationship with you and the medical information is for that plan’s or provider’s health care quality assessment and improvement activities, competence and qualification evaluation and review activities, or fraud and abuse detection and prevention.

Your Authorization
You may give us written authorization to use your medical information or to disclose it to anyone for any purpose. If you give us an authorization, you may revoke it in writing at any time. Your revocation will not affect any use or disclosure permitted by your authorization while it was in effect. Unless you give us a written authorization, we will not use or disclose your medical information for any purpose other than those described in this notice.

Family, Friends, and Others Involved in Your Care or Payment for Care: We may disclose your medical information to a family member, friend or any other person you involve in your health care or payment for your health care. We will disclose only the medical information that is relevant to the person s involvement. We may use or disclose your name, location, and general condition to notify, or to assist an appropriate public or private agency to locate and notify, a person responsible for your health care in appropriate situations, such as a medical emergency or during disaster relief efforts.

Before we make such a disclosure, we will provide you with an opportunity to object. If you are not present or are incapacitated or it is an emergency or disaster relief situation, we will use our professional judgment to determine whether disclosing your medical information is in your best interest under the circumstances.

Health-Related Products and Services and Appointment Reminders: We may contact you to remind you of appointments. We may use your medical information to communicate with you about health-related products, benefits and services, and payment for those products, benefits and services, that we provide or include in our benefits plan, and about treatment alternatives that may be of interest to you. These communications may include information about the health care providers in our network, about replacement of or enhancements to your health plan, and about health-related products or services that are available only to our enrollees that add value to, although they are not part of, our benefits plan.

Public Health and Benefit Activities: We may use and disclose your medical information, without your permission, when required by law, and when authorized by law for the following kinds of public health and interest activities, judicial and administrative proceedings, law enforcement, research, and other public benefit functions: for public health, including to report disease and vital statistics, child abuse, and adult abuse, neglect or domestic violence; to avert a serious and imminent threat to health or safety; for health care oversight, such as activities of state insurance commissioners, licensing and peer review authorities, and fraud prevention enforcement agencies; for research; in response to court and administrative orders and other lawful process; to law enforcement officials with regard to crime victims, crimes on our premises, crime reporting in emergencies, and identifying or locating suspects or other persons; to coroners, medical examiners, funeral directors, and organ procurement organizations; to the military, to federal officials for lawful intelligence, counterintelligence, and national security activities, and to correctional institutions and law enforcement regarding persons in lawful custody; and as authorized by state worker’s compensation laws.

Individual Rights

Access
You have the right to examine and to receive a copy of your medical information, with limited exceptions. You must make a written request to obtain access to your medical information. You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request.

We may charge you reasonable, cost-based fees for a copy of your medical information, for mailing the copy to you, and for preparing any summary or explanation of your medical information you request. Contact us using the information at the end of this notice for information about our fees.

Disclosure Accounting
You have the right to a list of instances after April 13, 2003, in which we disclose your medical information for purposes other than treatment, payment, health care operations, as authorized by you, and for certain other activities.

You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request. We will provide you with information about each accountable disclosure that we made during the period for which you request the accounting, except we are not obligated to account for a disclosure that occurred more than 6 years before the date of your request and never for a disclosure that occurred before April 14, 2003. If you request this accounting more than once in a 12-month period, we may charge you a reasonable, cost-based fee for responding to your additional requests. Contact us using the information at the end of this notice for information about our fees.

Amendment
You have the right to request that we amend your medical information. Your request must be in writing, and it must explain why the information should be amended. You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request.

We may deny your request only for certain reasons. If we deny your request, we will provide you a written explanation. If we accept your request, we will make your amendment part of your medical information and use reasonable efforts to inform others of the amendment who we know may have and rely on the unamended information to your detriment, as well as persons you want to receive the amendment.

Restriction
You have the right to request that we restrict our use or disclosure of your medical information for treatment, payment or health care operations, or with family, friends or others you identify. We are not required to agree to your request. If we do agree, we will abide by our agreement, except in a medical emergency or as required or authorized by law. You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request. Any agreement we may make to a request for restriction must be in writing signed by a person authorized to bind us to such an agreement.

Confidential Communication
You have the right to request that we communicate with you about your medical information in confidence by alternative means or to alternative locations that you specify. You must make your request in writing, and your request must represent that the information could endanger you if it is not communicated in confidence as you request. You should submit your request to the contact at the end of this notice. You may obtain a form from that contact to make your request.

We will accommodate your request if it is reasonable, specifies the alternative means or location for confidential communication, and continues to permit us to collect premiums and pay claims under your health plan, including issuance of explanations of benefits to the subscriber of that health plan. Please note that an explanation of benefits and other information that we issue to the subscriber about health care that you received for which you did not request confidential communications, or about health care received by the subscriber or by others covered by the health plan in which you participate, may contain sufficient information to reveal that you obtained health care for which we paid, even though you requested that we communicate with you about that health care in confidence.

Right to Obtain a Paper Copy
If you receive this notice on our web site or by electronic mail (e-mail), you are entitled to receive this notice in written form. Please contact us using the information at the end of this notice to obtain this notice in written form.

Questions and Complaints

If you want more information about our privacy practices or have questions or concerns, please contact us using the information at the end of this notice.

If you are concerned that we may have violated your privacy rights, or you disagree with a decision we made about access to your medical information, in response to a request you made to amend, restrict the use or disclosure of, or communicate in confidence about your medical information, you may complain to us using the contact information at the end of this notice. You also may submit a written complaint to the Office for Civil Rights of the United States Department of Health and Human Services, 200 Independence Avenue, SW, Room 509F, HHH Building, Washington, D.C. 20201. You may contact the Office of Civil Rights’ Hotline at 1-800-368-1019. You may also submit a complaint using the OCR's online portal at the link listed below.

We support your right to the privacy of your medical information. We will not retaliate in any way if you choose to file a complaint with us or with the U.S. Department of Health and Human Services.

Contact Information

Address
MDwise
Attention: Privacy Officer
P.O. Box 441423
Indianapolis, IN 46244-1423

Telephone
Toll free: 1-800-356-1204
Indianapolis area: 317-822-7300

E-mail
legal@mdwise.org

You can also submit a complaint to OCR online:

Learn about filing a complaint with OCR under HIPAA: https://www.hhs.gov/hipaa/filing-a-complaint/index.html

File a complaint with OCR using the OCR complaint portal: https://ocrportal.hhs.gov/ocr/smartscreen/main.jsf