Confidentiality
General Information
Information regarding your health care, including payment for health
care, is protected by two federal laws: the Health Insurance Portability
and Accountability Act of 1996 (“HIPAA”), 42 U.S.C. 1320d et seq., 45
C.F.R. Parts 160 and 164, and the Confidentiality Law, 42 U.S.C.
290dd-2. 42 C.F.R. Part 2. Under these laws Mid-Eastern Council on
Chemical Abuse (MECCA) may not say to a person outside MECCA that you
attend the program, nor may MECCA disclose any information identifying
you as an alcohol or drug abuser, or disclose any other protected
information except as permitted by federal law.
MECCA must obtain your written consent before it can disclose
information about you for payment purposes. For example, MECCA must
obtain your written consent before it can disclose information to your
health insurer in order to be paid for services. Generally, you must
also sign a written consent before MECCA can share information for
treatment purposes or for health care operations. However, federal law
permits MECCA to disclose information without your written permission:
- Pursuant to an agreement with a qualified service
organization/business associate;
- For research, audit or evaluations;
- To report a crime committed on MECCA’s premises or against MECCA
personnel;
- To medical personnel in a medical emergency;
- To appropriate authorities to report suspected child abuse or
neglect;
As allowed by a court order.
For example, MECCA can disclose information without your consent to
obtain legal or financial services, or to another medical facility to
provide health care to you, as long as there is a qualified service
organization/business associate agreement in place.
Before MECCA can use or disclose any information about your health in a
manner which is not described above, it must first obtain your specific
written consent allowing it to make the disclosure. Any such written
consent may be revoked by you in writing.
Your Rights
Under HIPAA you have the right to request restriction on certain uses
and disclosures of your health information. MECCA is not required to
agree to any restrictions you request, but if it does agree then it is
bound by that agreement and may not use or disclose any information
which you have restricted except as necessary in a medical emergency.
You have the right to request that we communicate with you by
alternative means or at an alternative location. MECCA will accommodate
such requests that are reasonable and will not request explanation from
you. Under HIPAA you also have the right to inspect and copy your own
health information maintained by MECCA except to the extent that the
information contains psychotherapy notes or information compiled for use
in a civil, criminal or administrative proceeding or in other limited
circumstances.
Under HIPAA you also have the right, with some exceptions, to amend
health care information maintained in MECCA’s records, and to request
and receive an accounting of disclosures of your health related
information made by MECCA during the six years prior to your request.
You also have the right to receive a paper copy of this notice.
MECCA’s Duties
MECCA is required by law to maintain the privacy of your health
information and to provide you with notice of its legal duties and
privacy practices with respect to your health information. MECCA is
required by law to abide by the terms of this notice. MECCA reserves the
right to change the terms of this notice and to make new notice
provisions effective for all protected health information it maintains.
Any changes to this notice will be posted in all waiting areas of MECCA,
and individual copies of the notice of changes will be provided at no
charge when requested.
Complaints and Reporting Violations
You may complain to MECCA and the Secretary of the United States
Department of Health and Human Services if you believe that your privacy
rights have been violated under HIPAA. A complaint can be filed with
MECCA by providing a written summary of your complaint to the
CEO/President. Your written summary should contain a description of
MECCA’s actions that you believe violate your protected rights under
HIPAA, the dates of the violation, and the staff members involved. This
material should be sent to MECCA, CEO/President, 430 Southgate Avenue,
Iowa City, IA 52240. You will not be retaliated against for filing such
a complaint.
Violation of the Confidentiality Law by a program is a crime. Suspected
violations of the Confidentiality Law may be reported to the United
States Attorney in the district where the violation occurs.
Contact
For further information, contact Vice President for Operations, MECCA,
430 Southgate Avenue, Iowa City, IA 52240.
|