Your health information rights
Where HIPAA applies, you may have the right to:
- Get an electronic or paper copy of your medical record.
- Ask to correct your medical record.
- Request confidential communications.
- Ask to limit certain uses or disclosures.
- Get a list of certain disclosures.
- Get a copy of this notice.
- Choose someone to act for you.
- File a complaint if you believe your privacy rights have been violated.
Your choices
Where HIPAA applies, you may have choices about how certain health information is used or shared, including certain family disclosures, marketing communications, fundraising, or other uses that require authorization.
Uses and disclosures
Where HIPAA applies, health information may be used or shared for treatment, payment, and health care operations, and as otherwise permitted or required by law.
| Purpose | Example |
|---|---|
| Treatment | A clinician may review information to evaluate symptoms, eligibility, labs, medication options, and follow-up needs. |
| Payment | Information may be used to bill for eligible services or manage payment operations. |
| Health care operations | Information may be used for quality, safety, care coordination, compliance, security, and administrative operations. |
Other permitted or required uses
Health information may also be used or disclosed for public health, safety, legal compliance, health oversight, law enforcement, workers' compensation, lawsuits, coroners or medical examiners, organ donation, research where permitted, and other uses required or allowed by law.
Marketing, sale of information, and authorizations
Where HIPAA requires authorization, PHI will not be used or disclosed for marketing, sold, or used for certain other purposes without written authorization. You may revoke an authorization where permitted by law.
Our responsibilities
Where HIPAA applies, responsible parties must protect PHI, notify affected individuals after certain breaches, follow the duties and privacy practices described in the final notice, and not use or share information other than as described unless authorized or permitted by law.
Public website boundary
The public website, public quiz, and standard marketing forms are intended for non-PHI lead and routing information. Detailed health history, clinical notes, lab results, medication lists, diagnoses, and urgent clinical messages should be submitted only through protected workflows.
Complaints
You may complain if you believe your privacy rights have been violated. You may contact the privacy contact listed on the final notice or file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. You will not be retaliated against for filing a complaint.
Changes to this notice
The final notice may be changed. Changes may apply to information already held and new information received after the change.