Baptist Health Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASERE VIEW IT CAREFULLY.

This Notice describes the privacy practices of Baptist Healthcare System, Inc., and Our affiliated covered entities (collectively referred to as “Baptist,” “We,” ”Our” or “Us”) when you are treated as a patient at one of these facilities. An Affiliated Covered Entity (“ACE”) is a group of Covered Entities, Health Care Providers and Health Plan under common ownership or control that designates itself as a single entity for purposes of compliance with the Health Insurance Portability and Accountability Act (“HIPAA”). The members of the Baptist ACE will share Protected Health Information (“PHI”) with each other for the treatment, payment and health care operations of the Baptist ACE and as permitted by HIPAA and this Notice. Baptist may add or remove Covered Entities from the Baptist ACE. For a complete current list of the members of the Baptist ACE, please visit our website at BaptistHealth.com/ACE-List. This Notice also applies to services provided at other locations by Baptist employees, contractors, volunteers, students or representatives, including but not limited to services in your home, diagnostic centers, urgent care centers, occupational medicine clinics, physician offices, fitness centers, mobile health services, and critical care transport services.

We have an organized health care arrangement (“OHCA”) with the independent health care providers on our medical staffs, which include but are not limited to physicians, psychologists, certified nurse anesthetists, nurse practitioners, and physician assistants. Most of these providers are not employed by Baptist and are not agents for Baptist. However, it is necessary for them to share information to manage your care and to improve Our services. Those providers who participate in Our OHCA agree to follow the terms of this Notice and are included in references to Baptist, We, Our or Us in this Notice. This Notice serves as a joint notice of privacy practices for these providers and Baptist. If these independent providers treat you at another facility not operated by Baptist, you will receive separate notices from them.

Protecting Your Information

We understand that certain information about you and your health is personal. We are committed to protecting medical, billing and other information about you. If you have a personal representative as defined by applicable law, such as a legal guardian, we will treat that person the same as you with respect to uses and disclosures of your protected health information as well as your individual rights.

We create a record of the care and services you receive at or by Baptist. We need this record to provide you with quality care and to comply with certain legal requirements. This Notice will tell you about the ways in which We use and disclose information about you. It also describes your rights and Our duties regarding the use and disclosure of your information. We reserve the right to change this Notice and make the revised or changed Notice effective for medical information We already have about you, as well as any information We receive in the future. We will post a copy of the current Notice on Our Web site (www.baptisthealth.com) and it will also be available at the Registration or Admitting Department at all facilities covered by the Notice. The effective date of the Notice is located at the bottom of each page. We are required by law to (1) maintain the privacy of medical information that identifies you, (2) give you this Notice of Our legal duties and privacy practices, and (3) follow the terms of Our most current Privacy Notice.

Use and Disclosure of Information about You

The following categories describe different ways that We are permitted to use and disclose medical information. These examples are not exhaustive.

For Treatment. We may use your medical information to provide, coordinate, or manage your health care and any related services. We may disclose your medical information to employees, students, volunteers, physicians, other health care providers, and other individuals who are involved in providing treatment to you. For example, We may provide a physician who is treating you for a broken leg with information about another medical condition you may have, such as diabetes, because diabetes may slow the healing process. In addition, the physician may need to tell the dietitian if you have diabetes so that We can arrange for appropriate meals. This type of information sharing may occur through the use of an Electronic Health Record or through our participation in an electronic health exchange designed to facilitate sharing patient information for treatment purposes. Different departments also may share medical information about you in order to coordinate the different services and products you need, such as prescriptions, lab work and x-rays. We also may disclose medical information about you to people outside of Baptist or Our OHCA who are involved in your medical care, such as home health agencies, nursing homes, physicians, medical device or equipment companies, pharmacists, ambulance service providers, or others who provide services that are part of your care.
For Payment. We may use and disclose information about you so that the treatment and services you receive may be billed and payment may be collected from you, an insurance company or a third party. For example, We may need to give your health plan information about surgery you received at Baptist so your health plan will pay Us or reimburse you for the surgery. We may also tell your health plan about a treatment you are going to receive in order to obtain prior approval or to determine whether your plan will cover the treatment. We may also share your information with companies that provide billing or collection services for Us. We may allow companies to review information about you to evaluate your eligibility for receiving medical assistance, qualify you for such assistance, and arrange for payment. Also, We may disclose your information to another health care provider who provides treatment or services to you, such as an ambulance service, in order for that provider or service to receive payment.
For Health Care Operations. We may use and disclose information about you for health care operations. These uses and disclosures are necessary to provide quality health care and to support the daily activities related to health care. These uses and disclosures may occur through the use of an Electronic Health Record or through our participation in an electronic health exchange with other health care providers. These activities include but are not limited to quality assessment and improvement activities, utilization reviews, investigations, oversight or staff performance reviews, training programs, review and auditing, including compliance reviews and medical reviews, conducting or arranging for other health related activities, underwriting and other insurance-related activities, business planning or development, and internal grievance resolution. For example, We may use medical information to review treatment and to evaluate the performance of Our staff and independent health care providers who care for you. We may also combine medical information about many patients to decide what additional services We should offer, what services are not needed, and whether certain new treatments are effective. We may disclose patient information to agencies or companies for accreditation, certification, licensing, or credentialing activities. We may also combine the information We have with information from other facilities to compare how We are doing and to see where We can make improvements in the care and services We offer. We also may use or disclose patient information in conducting or arranging for legal, financial, auditing, risk management, consulting, management, and administrative services. We may use or disclose your information in Our fraud and abuse detection and compliance programs. In certain situations, We also may disclose your information to third parties for their own health care operations activities.
Activities of Our Organized Health Care Arrangement (OHCA). Members of Our OHCA share information about you in order to provide quality treatment, to obtain payment for the services, and to carry out health care operations related to the arrangement. Most providers who participate in Our OHCA are not agents for Baptist or each other. Baptist and participating providers are not responsible for each other’s actions.
Appointment Reminders. We may use and disclose your information to remind you of an appointment with Us.
Treatment Alternatives, Health-Related Benefits and Services. We may use and disclose your information to discuss treatment alternatives and health-related benefits or services that may be of interest to you, so long as We don’t receive any payment in exchange for such communication.
Fundraising Activities. We may use information about you to contact you in an effort to raise money to support Baptist and its operations. We may disclose information to a foundation related to Baptist or a Business Associate so that they may contact you with these giving opportunities. We are permitted to use and disclose limited information about you called demographic information, along with the dates you received services, your health insurance status, the department and/or practitioner who provided your services, and outcome information. You have a right to opt out of receiving fundraising communications, and We will tell you how to stop receiving them in any fundraising communications We send.
Directory. Our hospitals include limited information about you in the patient information directory, such as your name, location in the facility, and general condition. We usually give this information to people who ask for you by name so that they can visit you in the hospital and generally know how you are doing. We also may include your religious affiliation in the directory and we share this limited information with clergy from the community. You are free not to share your religious affiliation with Us if you do not want that information shared with clergy. We do not release this information if you are being treated on a behavioral health or substance abuse care unit. If you do not want your information included in Our directory, please let Us know.
Individuals Involved in Your Care or Payment for Your Care. As long as you do not object, We may share or discuss your medical information with family, friends, or others involved in your care or payment for your care if your provider believes, in his or her professional judgment, that it is in your best interest. Your provider may ask your permission, may tell you he or she plans to discuss the information and give you an opportunity to object, or may decide, using his or her professional judgement, that you do not object. In such cases, your provider will discuss only the information that the person involved needs to know about your care or payment for your care. This does not apply to patients receiving treatment for certain conditions, such as substance/alcohol abuse. In addition, We also may disclose information about you to an organization or agency assisting in disaster relief efforts so that your family can be notified about your condition and location.
Research. Medical research is vital to the advancement of medical science. We generally ask for your written authorization before using your health information or sharing it with others to conduct research. Under limited circumstances, we may use and disclose your health information without your authorization for health research. In the latter situations, we must comply with special processes required by law that reviews protections for patients involved in research, including privacy. Researchers may also contact you to see if you are interested in or eligible to participate in a study.
As Required By Law. We will disclose information about you when required or authorized by state or federal law. For example, the Secretary of the Department of Health and Human Services may require that We disclose information to confirm our compliance with HIPAA and We have a legal obligation to comply with such requests under federal law.
To Avert a Serious Threat to Health or Safety. We may use and disclose information about you when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.
Military and Veterans. If you are a member of the armed forces, We may release medical information about you if required by military command authorities. We may also release medical information about foreign military personnel to the appropriate foreign military authority.
Workers' Compensation. We may release information about you for workers' compensation or similar programs, as permitted or required by law. These programs provide benefits for work-related injuries or illness.
Public Health Risks. We may disclose information about you for public health activities. These activities generally include but are not limited to the following, as permitted or required by law: (1) preventing or controlling disease, injury or disability; (2) reporting births and deaths; (3) collecting or reporting adverse events and product defects, tracking FDA regulated products, and enabling product recalls, repairs or replacements; (4) notifying the appropriate government authority if We believe a patient has been the victim of abuse, neglect or domestic violence; and (5) notifying a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition.
Health Oversight Activities. We may disclose medical information to a health oversight agency for activities authorized by law. These oversight activities include but are not limited to audits, investigations, inspections, licensure and certification. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws.
Lawsuits and Disputes. If you are involved in a lawsuit or a dispute, We may disclose information about you in response to a court or administrative order. We may also disclose information about you in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute if We receive satisfactory assurances that attempts have been made to notify you or your attorney about the request or to secure a protective order. If you are involved in a lawsuit or dispute against Baptist, We may share your information as necessary to support Baptist’s position and to obtain legal services.
Law Enforcement. We may release information if asked by a law enforcement official such as (1) in response to a court order, subpoena, or warrant; (2) to identify or locate a suspect, fugitive, material witness, or missing person; (3) about the victim of a crime; (4) about a death or health condition that We believe may be the result of criminal conduct; and (5) to report a crime committed on Baptist premises.
Coroners, Funeral Directors and Organ Donation. We may disclose information to coroners or medical examiners for identification purposes, to determine the cause of death, or for them to perform other duties authorized by law. We may also release information to funeral directors as necessary for them to carry out their duties. We may use or disclose information for cadaveric organ, eye or tissue donation purposes.
Specific Government Functions. In certain situations, federal laws authorize Us to use or disclose your medical information to facilitate specified government functions relating to military and veteran activities, national security and intelligence activities, protective services for the President and others, medical suitability determinations, correctional institutions, and law enforcement custodial situations.
Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official, We may release information about you to the correctional institution or law enforcement official. This release would be necessary (1) for the institution to provide you with health care; (2) to protect your health and safety or the health and safety of others; or (3) for the safety and security of the correctional institution.

Your Rights Regarding Information about You

Right of Access. You have the right to inspect and obtain a copy of information that We maintain about you. Usually, this includes medical and billing records, but does not include certain other types of records. You have the right to request a copy of the information in an electronic format. If possible, We will provide the information in the electronic format you request. If We are unable to produce the information in the electronic format you request, We will offer you the information in another electronic format. To inspect or request a copy of the available records, you must submit your request in writing to the Health Information Management (“HIM”) or Medical Records Department of the facility that treated you. Under certain circumstances, We may charge you a fee for copying and mailing your records, and for supplies used to create the copy which may include the cost of portable media if you have requested the information in electronic format. We may deny your request to inspect or obtain a copy in certain limited circumstances. If you are denied access to information, you may request that the denial be reviewed in certain circumstances.
Right to Amend. If you feel that information We have about you is incorrect or incomplete, you may ask Us to amend the information. You have the right to request an amendment for as long as the information is kept by or for Us. To request an amendment, you must submit a written request, along with a reason that supports your request, to the HIM or Medical Records Department of the facility that treated you. If we accept your request, we will tell you and will amend your records. We may not be able to take out what is in the record, but we will supplement the information. We may deny your request if it is not in writing or does not include a reason to support the request. In addition, We may deny your request if you ask Us to amend information that (1) was not created by Us, unless the person or entity that created the information is no longer available to make the amendment; (2) is not part of the medical information kept by or for Us; (3) is not part of the information that you would be permitted to inspect and copy; or (4) is already accurate and complete as originally stated.
Right to Receive an Accounting. You have the right to receive an accounting or list of certain disclosures made by Us, upon your request. This right does not apply to disclosures (1) made to you or in response to an authorization form signed by you; (2) for national security or intelligence purposes; (3) for a facility directory; (4) made to your friends or family members involved in your care; (5) that are incident to a permitted use or disclosure; (6) made to correctional institutions or in law enforcement custodial situations; (7) made as part of limited data set as permitted by HIPAA; and (8) to carry out treatment, payment, and health care operations. To request an accounting, you must submit your request in writing to the HIM or Medical Records Department of the facility that treated you. The request may not cover a time period longer than six years prior to the date of the request. The first list you request within a 12-month period will be free. For additional lists, We may charge you a reasonable fee.
Right to Request Restrictions. You have the right to request a restriction or limitation on the information We use or disclose about you for treatment, payment or health care operations. You also have the right to request a limit on the information that We disclose to someone who is involved in your care or the payment for your care, like a family member or friend.Your request must be submitted in writing to the HIM or Medical Records Department of the facility that treated you. Your request must state the specific restriction requested and to whom you want the restriction to apply. In most cases, We are not required to agree to a requested restriction. However, We are required to agree when you ask Us to refrain from disclosing your information to a health plan if the disclosure would be for the purpose of payment or health care operations, and if the information pertains solely to a health care item or service that you have paid for in full and out of pocket. If We agree to a restriction or limitation, We will comply with your request unless the information is needed to provide emergency treatment.
Right to Request Confidential Communications. You have the right to request that We communicate with you about medical matters in a certain way or at a certain location. For example, you may ask that We contact you only at work or by mail. To request confidential communications, you must make your request in writing to the Registration, Admitting, HIM or Medical Records Department at the facility that treated you.
Right to Receive Breach Notifications. You have a right to receive notifications from Us if the privacy or security of your protected health information is breached.
Right to a Paper Copy of This Notice. You have the right to obtain a paper copy of this Notice, even if you have agreed to receive this Notice electronically. You may obtain a paper copy of Our current Notice by contacting the Registration or Admitting Department at all facilities. You may also visit Our Web site (www.baptisthealth.com).

Other Uses of Medical Information Requiring Your WrittenAuthorization

Certain uses and disclosures of your protected health information are only permitted with your written permission by signing an authorization form. These include most uses and disclosures of psychotherapy notes, certain uses and disclosures of your protected health information for marketing communications, and disclosures that constitute the sale of your protected health information.

Other uses and disclosures of information not covered by this Notice or the laws that apply to Us will be made only with your written permission by signing an authorization form. If you give Us authorization to use or disclose information, you may revoke that authorization, in writing, at any time. If you revoke your authorization, We will no longer use or disclose information about you for the reasons covered by your written authorization. We are unable to take back any disclosures We have already made with your permission. We are required to retain Our records of the care that We provided to you.

Other State and Federal Laws

Special restrictions may apply under state or federal law for uses and disclosures concerning certain sensitive information, such as information pertaining to mental health, substance abuse diagnosis or treatment, HIV/AIDS related testing and treatment, or sexually transmitted diseases. When special restrictions apply to your health information, We will use and disclose the information in compliance with the applicable law.

Questions and Complaints

If you have any questions about this Notice, please contact the appropriate Privacy Officer at the facility that treated you. If you believe your privacy rights have been violated, you may file a complaint with Us or with the Secretary of the Department of Health and Human Services.You will not be penalized for filing a complaint. To file a complaint, you may call 1.833.204.8787 or contact the Privacy Officer at the facility that treated you. A list of Privacy Officers is available at BaptistHealth.com/ACE-List.

Log in

Sign in to get started