THIS NOTICE DESCRIBES HOW PRESCRYPTIVE USES AND DISCLOSES MEDICAL AND FINANCIAL INFORMATION ABOUT YOU, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
At Prescryptive Health, we are committed to maintaining the confidentiality of your medical and financial information, which we refer to as your “personal information,” regardless of format: oral, written, or electronic. This Notice of Privacy Practices informs you about how we may collect, use and disclose your personal information and your rights regarding that information. The start date of this Notice is October 14, 2019. It will remain in effect until we replace it. This Notice pertains to you and your covered dependents. Please share it with your covered dependents.
OUR RESPONSIBILITIES TO PROTECT YOUR PERSONAL INFORMATION
We are required by law to:
- protect the privacy of your personal information;
- provide this Notice explaining our duties and privacy practices regarding your personal information;
- notify you following a breach of your personal information; and
- abide by the terms of this Notice.
HOW WE MAY COLLECT YOUR PERSONAL INFORMATION
We collect most of your personal information directly from you. In addition, by being our member, we may also obtain your personal information from third parties without your specific authorization. These third parties may include producers, employers, health care providers, other health plans or insurers, and state and federal agencies.
HOW WE MAY USE AND DISCLOSE YOUR PERSONAL INFORMATION
We may use or disclose your personal information without your specific authorization for the described purposes. For other purposes, we will request your specific authorization in writing, which you may grant or reject. If granted, you can revoke the authorization at any time by letting us know in writing.
Treatment: Though we do not provide treatment, we may disclose personal information about you that your doctor or other health care provider requests to help them with your medical treatment or services. For example, we may disclose what prescriptions you have filled to help your doctor or other health care provider to prescribe the appropriate medication.
Payment: We may use and disclose personal information so that we can process your medical claims. For example, we may need to disclose personal information to administer your pharmacy benefits, to coordinate benefits with other health plans, to determine coverage and to obtain premiums. However, state and federal laws prohibit us from disclosing certain types of sensitive personal information, including psychotherapy notes, about you without your specific authorization.
Health Care Operations: We may use and disclose personal information for health plan operations. For example, we may disclose personal information to conduct quality assessment and improvement activities. State laws may prohibit us from disclosing certain types of sensitive personal information about you to other members of your family without your specific authorization.
Business Associates: We may disclose your personal information to our Business Associates. These are entities or individuals that are not employed by us that perform health care operations or payment activities on our behalf which require that the Business Associate create, receive, maintain, or transmit your personal information. We must have contracts with our business associates that require them to maintain the confidentiality of your personal information.
Plan Sponsor: The plan sponsor is usually your employer or trust. We may disclose personal information about you to the plan sponsor through which you receive health benefits to permit the plan sponsor to perform plan administration functions. For example, we typically disclose enrollment and eligibility information.
Appointment/Service Reminders: We may use your personal information to contact you to remind you to inform you of treatment alternatives and/or health-related products or services that may be of interest to you and are provided by us, included in your plan of benefits or otherwise valuable products or services that are only available to current members.
Individuals Involved in Your Care or Payment for Your Care: We may disclose personal information about you to a family member or other individuals who are directly involved in your care or payment for your care, even after your death.
Operations: We may share your information with third parties that support or provide aspects of our products and services. Access to your information by these third parties is governed by confidentiality agreements, is limited to their role in assisting us with our operations and services, and are prohibited from using or sharing your information for any other purpose.
As Required by Law: We may use or disclose your personal information when required by federal, state or local law. For example, we may disclose personal information to a health oversight agency, to include the Secretary of the Department of Health and Human Services or a state insurance department, for activities such as audits, investigations, or related to licensure. If you receive public benefits through a government program, we may disclose personal information about you to the state or federal agency administering that program or another government program, including workers’ compensation programs.
Public Health and Safety: We may disclose personal information about you to the extent necessary to avert a serious and imminent threat to your health or safety or the health or safety of others.
Research: We may disclose your personal information as part of a limited data set for purposes of research, public health or health care operations. We also may disclose personal information to researchers when their research has been approved by a review board that has reviewed the research proposal and established protocols to ensure the confidentiality of your personal information.
Legal Proceedings: We may disclose your personal information in response to a court or administrative order, subpoena, discovery request, or other lawful process.
Law Enforcement: We may disclose your personal information to law enforcement officials if we receive a court order, warrant, grand jury subpoena or an inquiry for purposes of identifying or locating a suspect, fugitive, material witness or missing person. If you are an inmate, we may disclose your personal information to correctional institutions as allowed by law.
Military and National Security: Under certain circumstances, we may disclose to military authorities the personal information of armed forces personnel. We may also disclose to authorized federal officials personal information required for lawful intelligence, counterintelligence and other national security activities.
Sales and Marketing: We will not sell your personal information or use or disclose it for marketing purposes without first obtaining your written authorization to do so.
YOUR RIGHTS REGARDING PERSONAL INFORMATION
You have the following rights regarding personal information that we maintain about you.
Inspection: You have the right to request inspection and to receive a copy of a record of your personal information. If we maintain the record electronically, you have the right to request the copy be in the electronic format of your choice. If we cannot readily provide your record in that format, we will provide your record in an electronic format that you and we have agreed to.
Amendment: If you feel the personal information that we maintain about you is incorrect or incomplete, you have the right to request amendment to your personal information.
Restriction Request: You have a right to request a restriction or limitation on the personal information we use or disclose about you for treatment, payment and health care operations activities or disclosures to individuals involved in your care.
Confidential Communications: If you believe that disclosure of all or part of your personal information may endanger you, you have the right to request that we communicate with you about health matters at an alternative location. For example, you may ask that we only contact you at your work address.
Accounting of Disclosures: You have the right to an accounting of disclosures we have made for purposes other than for treatment, payment, health care operations, or that you specifically authorized. Your request may be for disclosures made up to 6 years before the date of your request. The first list you request within a 12-month period will be free. For additional lists, we may charge you a reasonable fee for the costs of copying, mailing, and supplies associated with your request.
All of these requests must be made in writing to email@example.com. Except for accounting of disclosures, we will evaluate each request and communicate to you in writing whether or not we can honor the request. There are instances when we cannot honor your request. For example, we will not amend personal information that was not created by us, unless the person or entity that created the information is no longer available to make the amendment. We may also charge a reasonable fee for the costs of copying, mailing and supplies associated with your inspection and amendment requests.
CHANGES TO THIS NOTICE
Should any of our privacy practices change, we reserve the right to change the terms of this Notice. The revised Notice would apply to all the personal information about you that we maintain. If we make any changes to our privacy practices, we will provide you with a copy of the revised Notice. We will also post the revised Notice on our web site. If you need a copy of this Notice or want more information about our privacy practices, contact us.
If you receive this Notice on our web site or by electronic mail (e-mail), you are also entitled to receive this Notice in paper form. To obtain a paper copy of this Notice, contact us.
REPORTING A PROBLEM
If you believe your privacy rights have been violated, or if you disagree with a decision we made about a request, you may file a written complaint with us or the Secretary of the Department of Health and Human Services (DHHS). You will not be penalized if you file a complaint about our privacy practices with us or with DHHS.
You may exercise any of your rights described in this Notice, or ask questions about these rights, by contacting us at: firstname.lastname@example.org, OR Attention:
Prescryptive Health, Inc.
PO Box 403
Redmond, WA 98073