Privacy and HIPAA Compliance

The privacy of your personal and health information are very important to us at the Kentucky QuitLine. We use your personal information to assist you in quitting smoking and improving our program. We will not share or sell your information with anyone or any entity not connected to our smoking cessation program, except as described in the Notice of Privacy Practices, below.

Notice of Privacy Practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information.  Please REVIEW it carefully.

This Notice describes how National Jewish Health may use and share your medical information.  It also describes your rights to access and control your medical information.  We will notify you if there is a breach of your unsecured protected health information.  Your health care team, support staff, our researchers and all our other employees, affiliates and volunteers are required to follow HIPAA’s requirements.

What medical information is protected?

Each time you visit National Jewish Health a record of your visit is made.  The information we create or receive about your past, present or future physical or mental health is called protected health information (PHI.) PHI may include documentation of your symptoms, examinations, test results, diagnoses and treatment.  It also includes documents related to billing and payment for care provided.

How will National Jewish Health use and disclose my PHI?

The following categories describe ways in which we are allowed to use you PHI within National Jewish Health and release your health information without first seeking your written permission (which is called an “authorization” under HIPAA.)  We have not listed every single use or release but all permitted uses and releases fall within one of the following categories:

Treatment- We may use or disclose your PHI to provide you with medical treatment and healthcare services.  We may share your PHI with or request it from doctors, nurses, technicians, medical students, interns, hospitals or others who are involved in taking care of you during your visit with us or elsewhere for continuity of care. 

Payment - We may use or disclose your PHI so the treatment and services you receive may be billed to and payment collected from you, an insurance company or other payer.  This may also include the release of PHI to obtain prior authorization for treatment and procedures from your insurance plan.

Health Care Operations – These uses or disclosures are necessary to operate our healthcare facility and make sure all of our patients receive quality care.  We may use only the minimum necessary patient identifiers for these purposes.  Some of these uses may include quality assurance activities; granting medical staff credentials to physicians; administrative activities, including the hospital financial and business planning; customer service activities, including investigation of complaints; auditing and compliance program activities; and educational and training activities.

Business Associates – Some of our services are provided through contracts with third parties who are Business Associates of National Jewish Health.  We may share your health information with them so that they can perform the job we’ve asked them to do.  We require our Business Associates to sign a contract that states they will appropriately protect your PHI.  Examples of Business Associates include information storage services, management consultants, quality assurance reviewers and auditors.

Appointment Reminders – We may use PHI to contact you as a reminder that you have an appointment for treatment or medical care at National Jewish Health.

Fundraising - We may use certain PHI for fundraising including your name, address, dates of service, date of birth, age, gender, department of service, treating physician, outcome information, and insurance information.

Can National Jewish Health use and disclose my PHI for research?

 National Jewish Health may want to use and disclose your PHI for research projects.  Before using your PHI in a research project, National Jewish Health will either obtain your written permission or obtain permission from an authorized HIPAA Privacy Board.  The Privacy Board will only give its permission if the proposed use of your PHI has met HIPAA’s requirements for release for research purposes.

 Are there situations that require my written permission before NJH uses or shares of my PHI?

 Use or sharing of your PHI in situations that are not covered by this Notice or the laws that apply will be made only with your written permission. If you do give us permission to use or disclose medical information about you, you may revoke that permission, in writing, at any time.  If you revoke your permission, we will no longer use or share PHI about you for the reasons covered in your written authorization but we cannot take back any disclosures we have already made.  Some typical situations that require your authorization are as follows:

 Marketing. We may ask you to sign an authorization to use or disclose PHI as a part of a marketing effort.   Marketing is generally defined as a communication about a product or service that encourages the recipient to purchase or use the items described. Marketing does not include (i) communications about your treatment or recommendations about alternative treatments or providers unless NJH is being paid to make the communication, (ii) mere descriptions of products or services that NJH offers, (iii) communications made face-to-face or (iv) a promotional gift of nominal value provided by NJH. If NJH will be paid for sending the marketing communication, the authorization will state that payment is involved.

 Alcohol and Drug Abuse Treatment Records.  Use and disclosure of any medical information about you relative to alcohol or drug abuse treatment programs receives additional protection under federal law (42 CFR Part 2.)  Generally, we will not disclose any information identifying you as a recipient of alcohol or drug abuse treatment unless you have consented in a writing that qualifies under the law or we receive a court order requiring the disclosure.

 Disclosures of Mental Health Treatment Information. We may share your information for treatment purposes to qualified professionals, for payment purposes or if we receive a court order.  In most other cases, Colorado law requires your written authorization or the written authorization of your representative.

 Psychotherapy Notes.  Psychotherapy notes are the personal notes of psychotherapists.  Under most circumstances, we must obtain your permission to use or disclose psychotherapy notes.

 HIV/AIDS Information.  Use and disclosure of any medical information about you relative to HIV testing, HIV status or AIDS, is protected by federal and state law.  Generally we will need your permission to disclose this information; however, state laws require certain reporting and disclosure when public safety, emergency medical services or detention center staff might have been exposed.

 Minors.  As a general rule, we disclose PHI about minors to their parents or legal guardians.  However, in instances where state law allows minors to consent to their own treatment without parental consent (such as HIV testing, minors who are emancipated), we will not disclose that information to the minor’s parents without the minor’s permission unless otherw

Can I review and have a copy of my medical information?

Yes, in most circumstances, you may inspect and get a paper or electronic copy of medical information that may be used to make decisions about your care.  To request to inspect or to get a copy of your information, please contact the Health Information Management Department  (Medical Records) at (303) 398-1989.   We may charge a reasonable, cost-based fee for making copies.  In certain limited situations, we may deny your request to inspect and copy your PHI.  If we deny your request, you may request a review of our decision. 

Can I restrict how National Jewish Health uses my PHI for treatment, payment or operations?

You may ask us not to use or disclose any part of your PHI for a particular reason related to treatment, payment or health care operations.  We will consider your request, but we are not legally obligated to agree to most such requests.  If you have paid for services out-of-pocket in full, you may request that we not disclose information related solely to those services to your health plan and we are required to agree to your request unless another law requires us to make the disclosure.   You also may request that we not disclose your PHI to family members, friends or others who may be involved in your care.  Your request must be in writing.  You may obtain a restriction form by contacting the Health Information Management Department at (303) 398-1989.

Can I amend my protected health information (PHI)?

If you believe the medical information we have about you is incorrect or incomplete, you have the right to request that we correct the existing information or add missing information.  Requests to amend PHI must be made in writing and include a reason for your request.  You may obtain an amendment form by contacting the Health Information Management Department at (303) 398-1989. We may deny your request.  If we deny your request, you have the right to file a statement of disagreement.  We may respond to this statement.  Both your statement of disagreement and our response will be attached to the medical record.  If we grant your request, we will make the changes and distribute it to the people whom we believe need it and to those whom you state should receive a copy. 

Can I ask you to communicate with me using different means or at a different place?

Yes.  We agree to such requests when they are reasonable and we have a process available to accommodate your request.  You may obtain a form for this purpose by contacting the Health Information Management Department at (303) 398-1989.

Can I receive an accounting of the disclosures made by National Jewish Health?

You can obtain an accounting of any disclosures made by National Jewish Health that occurred within the last six (6) years.  This accounting does not include disclosures made to you or the disclosures under categories that do not require your written permission and certain other legal exceptions.  It will contain the date information was disclosed, the name of the party receiving the information and a brief description of what was disclosed and why.  The first accounting in a 12-month period is free.  After that, with advance notice to you, we may charge a reasonable, cost-based fee.  To request a disclosure, please contact the Health Information Management Department at (303) 398-1989.

What if I th