Notice of Privacy Practice
This Notice tells you about the ways in which we may use and disclose your medical information. It also describes your rights and certain obligations we have regarding the use and disclosure of your medical information. If you have any questions regarding this Notice, please call Nascentia Health’s Privacy Officer at 315-477-4663.
We are required by law to:
- make sure that your medical information is protected;
- give you this Notice describing our legal duties and privacy practices with respect to medical information about you; and
- follow the terms of the Notice that is currently in effect.
- notify you of a breach of unsecured protected health information.
I. HOW WE MAY USE AND DISCLOSE MEDICAL INFORMATION ABOUT YOU
The following describes how we may use and disclose your health information for treatment, payment, and healthcare operations. Not every type of use or disclosure is listed below, but the ways in which we use or disclose your information will be under one of these purposes. In addition, depending on the nature of the health information, such as HIV-related, genetic, and mental health information, we may be subject to stricter use and disclosure requirements under state law. We shall follow such requirements.
For Treatment: We may use medical information about you to provide you with medical treatment or services. We may disclose medical information about you to doctors, nurses, or other personnel who are involved in your care. We may also share medical information about you with other Nascentia Health personnel or non-Nascentia Health providers, agencies, or facilities in order to provide or coordinate the different things you need. We also may disclose medical information about you to people outside Nascentia Health who may be involved in your continuing medical care such as other health care providers, transport companies, community agencies and family members.
For Payment: We may use and disclose your medical information so that the treatment and services you receive from Nascentia Health may be billed to and payment may be collected from you, an insurance company or a third party. We may also tell your health plan about a proposed treatment to determine whether your plan will cover the treatment.
For Health Care Operations: We may use and disclose medical information about you for Nascentia Health operations. These uses and disclosures are made for quality of care and medical staff activities, health sciences education within Nascentia Health. In addition, your medical information may also be used or disclosed to comply with law and regulations, for contractual obligations, patients’ claims.
II. USES AND DISCLOSURES OF INFORMATION IN SPECIAL SITUATIONS
We may use or disclose your health information in certain special situations as described below, without authorization, to the extent such uses and disclosures comply with federal and state law.
Treatment Alternatives: We may tell you about possible treatment options or alternatives that may be of interest to you.
Health-Related Benefits and Services: We may contact you to tell you about benefits or services that may be of interest to you.
Fundraising Activities: We may contact you to provide information about Nascentia Health sponsored activities, including fundraising programs and events. In these instances, we only use contact information, such as your name, address and phone number and the dates you received treatment or services at Nascentia Health. You have the right to request that we not contact you for subsequent fundraising events.
News Gathering Activities: We may contact you or a family member when a news reporter has requested an interview with you. If you choose to participate in the interview, the staff member will obtain your written authorization to do so, and a copy of this authorization will be kept in your medical record.
Individuals Involved in Your Care or Payment for Your Care: Unless you object, we may disclose your medical information to anyone involved in your medical care, e.g., a friend, family member, personal representative, or any individual you identify. We may also give your medical information to someone who helps pay for your care. We also may disclose the health information of minor children to their parents or guardians unless such disclosure is otherwise prohibited by law.
Disaster Relief Efforts: We may disclose your medical information to an entity assisting in a disaster relief effort so that your family can be notified about your condition, status and location.
As Required By Law: We will disclose medical information about you when required to do so by federal or state law.
To Avert a Serious Threat to Health or Safety: We may use and disclose medical information about you when necessary to prevent or lessen a serious and imminent threat to your health and safety or the health and safety of the public or another person. Any disclosure would be to someone able to help stop or reduce the threat.
Organ and Tissue Donation: We may release your medical information to organizations that handle organ procurement or organ, eye, or tissue transplantation.
Workers Compensation: We may use or disclose medical information about you for Workers’ Compensation or similar programs as authorized or required by law. These programs provide benefits for work-related injuries or illness
Military and Veterans: If you are or were a member of the Armed Forces, we may release medical information about you to military command authorities as authorized or required by law. We may also release medical information about foreign military personnel to the appropriate military authority as authorized or required by law.
Public Health & Safety: As required by law, we may disclose medical information about you for public health purposes. These purposes generally include the following:
- preventing or controlling disease, injury or disability;
- reporting vital events such as births and deaths;
- reporting suspected child abuse or neglect;
- reporting adverse events or surveillance related to food, medications or defects or problems with products;
- notifying persons of recalls, repairs or replacements of products they may be using;
- notifying a person who may have been exposed to a disease or may be at risk of contracting or spreading a disease or condition;
- notifying the appropriate government authority if we suspect a patient has been the victim of abuse, neglect or domestic violence and make this disclosure as authorized or required by law.
Health Oversight Activities: We may disclose your medical information to governmental, licensing, auditing, and accrediting agencies as authorized or required by law.
Lawsuits and Other Legal Actions: In connection with lawsuits or other legal proceedings, we may, as authorized or required by law, disclose medical information about you in response to a court or administrative order, or in response to a subpoena, discovery request, warrant, summons or other lawful process.
Law Enforcement: If asked to do so by law enforcement, and as authorized or required by law, we may release your medical information:
- to identify or locate a suspect, fugitive, witness, or missing person;
- about a suspected victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement;
- about a death suspected to be the result of criminal conduct;
- about alleged criminal conduct at Nascentia Health; and
- in case of a medical emergency, to report a crime; the location of the crime or victims; or the identity, description or location of the person who committed the crime.
Coroners, Medical Examiners and Funeral Directors: In most circumstances, we may disclose your medical information to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine cause of death. We may also disclose your medical information to funeral directors as necessary to carry out their duties.
National Security and Intelligence Activities: As authorized or required by law, we may disclose medical information about you to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized or required by law.
Protective Services for the President and Others: As authorized or required by law, we may disclose medical information about you to authorized federal officials so they may conduct special investigations or provide protection to the President of the United States, other authorized persons or foreign heads of state.
Inmates: If you are an inmate of a correctional institution or under the custody of law enforcement officials, we may release medical information about you to the correctional institution as authorized or required by law.
Incidental Uses and Disclosures: In order to ensure that communications essential to providing quality healthcare would not be hindered, incidental disclosures may occur.
III. YOUR RIGHTS REGARDING MEDICAL INFORMATION ABOUT YOU
III. YOUR RIGHTS REGARDING MEDICAL INFORMATION ABOUT YOU
Your medical record is the property of Nascentia Health. You have the following rights, however, regarding medical information we maintain about you:
- Right to Visually Inspect and Receive a Copy: With certain exceptions, you have the right to visually inspect and/or receive a copy of your medical information. To inspect and/or to receive a copy of your medical information, you must submit your request in writing to Nascentia Health ATTN HIM Department at 1050 West Genesee Street, Syracuse, NY 13204. If you request a copy of the information, there is no fee for copies. We may deny your request to visually inspect and/or to receive a copy in certain limited circumstances. When access is granted for visual inspection, Nascentia Health will provide visual access to the requested PHI within 5 days. If space is not available for visual inspection, Nascentia Health must provide a copy within 5 days. To receive a copy of your medical records, a written authorization for release of medical information must be submitted to Nascentia Health’s Health Information Department. Nascentia Health will respond to the request within 30 days of request either by sending the requested information or an explanation of why it cannot be sent within that 30 days. Nascentia Health may have a one-time extension of 30 days (for a total of 60 days) provided that a written notice to the patient stating the reason for the delay and the expected date is sent prior to the expiration of the initial 30 days. If you are denied access to your medical information, you may request an appeal of such denial through the New York State Department of Health. Contact Nascentia Health at (315) 671-5121 to obtain a form to request such an appeal. If your medical information is maintained in an electronic health record, you also have the right to request that an electronic copy of your record be sent to you or to another individual or entity.
- Right to Request an Amendment: If you feel that medical information we have about you is incorrect or incomplete, you may ask us to amend your medical information. You have the right to request an amendment for as long as the information is kept by or for Nascentia Health.
To request an amendment, your request must be made in writing and submitted to Nascentia Health. In addition, you must provide a reason that supports your request. In addition, we may deny your request if you ask us to amend information that:- was not created by Nascentia Health;
- is not part of the medical information kept by or for Nascentia Health;
- is not part of the information which you would be permitted to inspect and copy; or
- is accurate and complete in the record.
- Right to an Accounting of Disclosures: You have the right to receive a list of the disclosures we have made of your medical information unless the disclosure was for treatment, payment, health care operations or if you authorized in writing the disclosure of your health information. Certain other disclosures are not included in the list, including disclosures you authorized us to make; disclosures made to you, or to your family and friends involved in your care; disclosures made to federal officials for national security purposes; disclosures made to correctional facilities; and disclosures made six years prior to your request. To request this accounting of disclosures, you must submit your request in writing to Nascentia Health. Your request must state a time period that may not be longer than the six previous years and may not include dates before April 14, 2003. Nascentia Health will provide you one accounting within any 12-month period at no cost. If you request a second accounting within that 12-month period, there will be a charge for the cost of compiling the accounting. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.
- Right to Receive Notice of a Breach: We are required to notify you by first class mail or by e-mail (if you have indicated a preference to receive information by e-mail), of any breaches of Unsecured Protected Health Information as soon as possible, but in any event, no later than 60 days following the discovery of the breach. “Unsecured Protected Health Information” is information that is not secured through the use of a technology or methodology identified by the Secretary of the U.S. Department of Health and Human Services to render the Protected Health Information unusable, unreadable, and undecipherable to unauthorized users.
- Right to Request Restrictions: You have the right to request a restriction or limitation on the medical information we use or disclose about you for treatment, payment or health care operations. You also have the right to request a limit on the medical information we disclose about you to someone who is involved in your care or the payment for your care, such as a family member or friend. You also have the right to restrict the disclosure of your health information to a health plan (your health insurer) related to services or items we provide to you and you pay us for such services or items we provide to you and you pay us for such services or items out-of-pocket in full, we must agree to your request, unless we are required by law to disclose the information. Please note: This restriction will apply only when requested and services are paid in full. Future services without a restriction request and for which no out-of-pocket payment is received will be billed per provider and health plan policy, which may include current provider notes that reference prior treatments or services previously restricted. To request a restriction, you must make your request in writing to Nascentia Health. In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure or both; and (3) to whom you want the limits to apply. We are not required to agree to your request. If we do agree, our agreement must be in writing, and we will comply with your request unless the information is needed to provide you emergency treatment.
- Right to Request Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you may ask that we contact you only at home or only by mail. To request confidential communications, you must make your request in writing to Nascentia Health. We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.
- Right to a Paper Copy of This Notice: You have the right to a paper copy of this Notice. You may ask us to give you a copy of this Notice at any time. Even if you have agreed to receive this Notice electronically, you are still entitled to a paper copy of this Notice. Copies of this Notice are posted on our website.
IV. CHANGES TO NASCENTIA HEALTH’S PRIVACY PRACTICES AND THIS NOTICE
We reserve the right to change Nascentia Health’s privacy practices and this Notice. We reserve the right to make the revised Notice effective for medical information we already have about you as well as any information we receive in the future. We will post a copy of the current Notice physically at various locations at Nascentia Health and electronically on the website. The Notice will contain the effective date on the first page in the top right-hand corner. In addition, you may request a copy of the current Notice in effect.
V. QUESTIONS OR COMPLAINTS
If you have any questions about this Notice, please contact Nascentia Health at (315) 477-4663. If you believe your privacy rights have been violated, you may file a complaint with Nascentia Health or with the Secretary of the United States Department of Health and Human Services, Office of Civil Rights, Hubert H. Humphrey Bldg., 200 Independence Avenue, S.W., Room 509F HHH Building, Washington, DC 20201. To file a complaint with Nascentia Health, contact the Privacy Officer, telephone number 315-477-4663. You will not be penalized for filing a complaint.
VI. USES AND DISCLOSURES REQUIRING WRITTEN AUTHORIZATION
We will only make the following uses and disclosures with your written authorization:
- Uses and disclosures for marketing purposes.
- Uses and disclosures that constitute a sale of protected health information.
- Most uses and disclosures of psychotherapy notes.
VII. OTHER USES OF MEDICAL INFORMATION
Other uses and disclosures of your medical information not covered by this Notice will be made only with your written authorization. In those instances where your prior written permission for the use and disclosure of your health information is necessary, we will provide you with Nascentia Health’s Authorization Form for you to sign. You may revoke your authorization, in writing, at any time. If you revoke your authorization, we will no longer use or disclose medical information about you for the reasons covered by your authorization. You understand that we are unable to take back any disclosures we have already made with your permission, and that we will retain our records of the care provided to you as required by law.
Website Privacy Policy
Through our website we may collect information in the following ways:
- when you voluntarily provide information through contact forms;
- passively through technology such as “cookies”
In our contact forms we ask for personal identifying information such as name, email, phone number, best time to contact. This information is only used to contact you regarding your inquiry. Completing the form is entirely voluntary.
When visiting our website to view content and/or download Information. we use Google Analytics to gather and store certain information about your visit automatically. Any of the information collected does not personally identify you.
The information we collect includes:
- Log and Usage Data.
- This includes your IP address, device information, browser type, and information about your activity (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take );
- Device Data.
- This includes data such as information about your computer, phone, tablet, or other device you use to access our website. Depending on the device used, this may include information such as your IP address (or proxy server), location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
- Location Data.
- This includes information about your device’s location. How much information we are able to collect depends on the type and settings of the device you use to the website. You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the website.
Any of the information we collect from you may be used to respond to user inquiries, improve your user experience, and identify website usage trends.
We have processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
If you would like to opt out of our tracking, please contact web@nascentiahealth.org.
Revised 04/2021