Sanctuary Of Transformation is committed to providing quality addiction treatment services. An important part of that commitment is protecting your health information according to applicable law. This notice (“Notice of Privacy Practices”) describes your rights and our duties under Federal Law.
THIS NOTICE DESCRIBES HOW YOU MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AS WELL AS HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Information Collection and Use
For a better experience while using our website, we may require you to provide us with certain personally identifiable information, including but not limited to your name, phone number, and email address. The information that we collect will be used to contact or identify you.
When do we collect information? We collect information from you when you fill out a form, Use Live Chat or enter information on our site.
Security We value your trust in providing us with your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the Internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.
California Privacy Rights
Pursuant to California Civil Code Section 1798.83, California residents have the right to request from a business any personal information that a business may have shared with a third party for direct marketing purposes. To make such a request, please email us at: firstname.lastname@example.org .
The California Online Privacy Protection Act (CalOPPA) requires the Company to disclose how it responds to Do Not Track signals set in a user’s browser. We support Do Not Track browser settings. If you enable Do Not Track settings in the browser you are using, the Company will not store or use information about you other than your visit to the Company’s website.
Our Services do not address anyone under the age of 13. We do not knowingly collect personal identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to perform the necessary actions.
All of the people that make up Sanctuary Of Transformation are required to abide by the terms of this Notice when we use or disclose your medical information. We restrict access to your medical information to those employees who need to know in order to provide appropriate treatment or series to you or to conduct Sanctuary Of Transformation business on your behalf.
Understanding Your Medical Records Sanctuary Of Transformation creates a record of the care and services you receive from its various facilities. We understand that medical information about you and your health is personal. Care records include demographics, diagnosis, treatment, referral, and various forms containing billing information. This type of medical information is often called “Protected Health Information” (PHI). We are committed to protecting medical information about you,
whether electronically, on paper or orally. This Notice applies to all of the medical records of your care within Sanctuary Of Transformation.
Our Legal Duty Sanctuary Of Transformation is bound by Federal and State privacy and confidentiality laws to maintain information about your health, healthcare, and payment services in a confidential fashion. It is our obligation to provide you with this Notice of our legal duties and privacy practices with respect to your PHI.
Privacy and Confidentiality Obligations PHI is protected under the following Federal regulations:
Federal Confidentiality Laws: 42 CFR Part 2, Substance Abuse Confidentiality Regulations
45 CFR Parts 160 and 164, Subparts A and E, known as the Health Insurance Portability and Accountability Act (HIPAA Omnibus Final Rule)
Subtitle D of the Health Information Technology for Economic and Clinical Health (HITECH) Act, part of the American Recovery and Reinvestment Act (ARRA) of 2009
For Treatment: We will use and disclose your protected health information (PHI) to provide you with treatment services. With your authorization, we may use and disclose your PHI as part of a referral to a specialist physician or for other treatment related services if necessary. Your authorization is not required in a medical emergency; however, the information released will be limited to only that which is necessary for the emergency services being rendered.
For Payment: With your authorization, we may use and disclose your PHI to receive payment for the treatment services provided, such as sending billing information to a health insurance plan. Should you choose to pay out-of-pocket, no information will be shared with your insurance company unless you request so in writing.
For Healthcare Operations: We may use and disclose your PHI for administrative purposes in order to evaluate the quality of care that you receive through audits and/or on-site inspections by licensing and accrediting entities or through our normal course of business with other entities with whom we have a Business Associate Agreement. These agreements are put in place to help protect your PHI from
further disclosure and to specify that they are responsible for the security of that information.
With Authorization: In any other situation, we will ask for your written authorization before using or disclosing any PHI about you. If you choose to sign an authorization to disclose information, you can later revoke that authorization in writing to stop any future uses and disclosures.
Individuals Involved in Your Care or Payment for Care: With your signed authorization, your PHI may be disclosed to a family member, friend or other person to help with your healthcare.
Incompetent and Deceased Patients: In such cases, authorization of a personal representative, guardian, executor of estate, or other person authorized by applicable state/federal law, will need to prove relationship and sign an authorization to have your PHI disclosed to them.
Marketing Communications: We may not use your PHI for marketing purposes. We may not sell your PHI.
Fundraising Communications: We do not engage in fundraising activities and your PHI will not be disclosed for such activities without your written consent.
Research: We do not disclose PHI for research purposes without your written consent. Information without patient identifiable date may be used for generic research.
Worker’s Compensation and Disability: With your signed authorization, PHI about you may be disclosed for worker’s compensation, disability, or similar programs.
Written Authorizations: We may disclose your PHI when we receive a written authorization from you to do so. This authorization must be completed on a form that specifically meets State and Federal applicable requirements. Into Action Recovery Centers “Authorization to Release Protected Health Information” is available at all of our locations or can be requested at any time.
Should you decide to revoke a signed authorization, you may do so at any time, except to the extent that action has been taken in reliance on it, the authorization has already expired and/or has already been revoked. If you are currently receiving services and want to revoke an authorization, we ask that you see speak to your counselor to complete the necessary revocation process. After discharge, you may visit any of our locations to complete
the “Revocation of Authorization to Release Protected Health Information” form, or obtain the form from our website at sanctuaryoftransformation.com. Please note: revocation begins when we receive the completed and signed revocation form in one of our offices.
Uses and Disclosures WITHOUT Your Written Authorization We may disclose your protected health information (PHI) without your written authorization only under the following circumstances.
Medical Emergencies: We may use or disclose your PHI in a medical emergency situation to medical personnel only. The information will be limited to that which is needed to provide you with the emergency services.
Consistent with Federal, State, or Local Law: We may use or disclose your PHI to the extent that the use or disclosure is required by law, made in compliance with the law, and limited to the relevant requirements of the law. You will be notified, as required by law, of any such uses or disclosures. Under the law, we must make disclosures of your PHI to you upon your request.
Secretary of Health and Human Services: We are required to disclose your PHI to the Secretary of Health and Human
Services for the purpose of investigating or determining our compliance with the requirements of the of the HIPAA Privacy Rule.
Victim of Abuse or Neglect (Child/Elder Abuse or Neglect): We may disclose your PHI to a state or local agency that is authorized by law to receive reports of child or elder abuse or neglect; however, the information we disclose is limited to only that information which is necessary to make the initial mandated report.
Public Health Activities/Communicable Disease: We may disclose your PHI to a state or local agency that is authorized by law to receive reports of diagnosed communicable disease; however, the information we disclose is limited to only that information which is necessary to make the initial mandated report.
Health Oversight Activities: We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, and inspections. Oversight agencies seeking this information include government agencies and organizations that provide financial assistance to the program (such as third-party payers) and peer review organizations performing utilization and quality control.
Business Associates: We may use or disclose your PHI to our “Business Associates” (BA) who perform certain functions or activities that involve the use or disclosure of PHI on behalf of, or provides services to us. All of our BA’s are obligated to protect the privacy of your PHI and may use the information only for the purposes for which the BA was engaged.
Data Breach Notification Purposes: We may use or disclose your PHI to provide legally required notices of unauthorized access to or disclosure of your PHI. We will notify you in writing following a breach of unsecured PHI.
Deceased Patients: We may disclose PHI regarding deceased patients for the purpose of determining the cause of death or permitting inquiry into the cause of death. We may disclose PHI to coroners and medical examiners consistent with applicable law, as necessary to carry out their duties.
Criminal Activity on the Facility Premises: We may disclose your PHI to law enforcement officials if you have committed a crime on the facility premises.
Judicial and Administrative Proceedings: We may disclose your PHI in response to a court order or administrative tribunal order, a subpoena, a discovery request, or other lawful process by only when we have followed procedures
required by law. We may disclose your PHI if the court issues an appropriate order and follows required procedures. Your PHI will also be released to our Corporate Attorney.
Uses and Disclosures That Require Us to Give You an Opportunity to Object and Opt
Other Categories: Other uses and disclosures of PHI not covered by this Notice or the laws that apply to us will be made only with your written authorization.
Your Rights Regarding Your Protected Health Information Although your medical record is the physical property of Sanctuary Of Transformation, the information belongs to you. You have the right to:
Right to Access, Inspect and Copy: You have the right to review, inspect, request and get copies of your PHI used to make decisions about you and your care for as long as we maintain the PHI as required by law. If you are a current patient, this review is usually done in the presence of the physician or your case manager. If you are an ex-patient, this review is done in our Medical Records Office. You have the right to request a copy of your medical records. If you are a current patient and wish to receive a copy of your record, you will need to do so in writing with a staff
member, for example, your case manager. Your record will be forwarded to you within three weeks of discharge.
Right to an Electronic Copy of Electronic Medical Records: If your Protected Health Information (PHI) is maintained in an electronic format (known as an electronic medical record/electronic health record), you have the right to request that an electronic copy of your record be given to you. Notification of a Breach: You have the right to be notified in the event that we (or one of our “Business Associates”) discovers a breach of any of your unsecured PHI. This notification must be done in a timely fashion after the date of discovery has occurred.
Right to Amend: If you feel information in your record is incorrect or if important information is missing, you have the right to request that we amend the information. We are not required to agree to the amendment. The request for amendment needs to be in writing. Please contact the Privacy Officer for assistance with correct form completion and process guidelines.
Right to an Accounting of Disclosures: You have the right to request in writing an accounting of the disclosures we make of your PHI for reasons other than treatment, payment or
healthcare operations during the last 6 years. If you request this accounting more than once in a 12-month period, we may charge you a reasonable, cost-based fee for responding to these additional requests.
Right to Request Restrictions: You have the right to request in writing a restriction or limitation on the use of your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request.
Right to Request Alternate Confidential Communications: You have the right to request in writing that we communicate with you about medical matters in a certain way or at a certain location. We are not required to agree to your request.
Out of Pocket Payments: If you paid “out of pocket” (or in other words, you have requested that we not bill your health plan) in full for a specific item or service, you have the right to request in writing that your PHI with respect to that item or service not be disclosed to a health plan for purposes of payment or health care operations, and we will honor that request.
Right to a Copy of This Notice: You have a right to a copy of this notice. You may request to have a paper copy of this
Notice at any time. You may also obtain it from our website at sanctuaryoftransformation.com