Confidentiality

Your physician understands the importance of patient confidentiality and is committed to the protection of your personal health information.

All personal identification information is protected and stored on a secure server. All information given via the physician consult form or in a conversation with any of our employees is held in complete confidence. Our employees adhere to the strict standards for patient confidentiality set by the American Medical Association and the Health on the Net Foundation.

We do not share any of your personal information with any of our affiliate or associate sites. When you access a site that is not a part of your physician's website or the eHealth portal, you will be notified prior to linking to that site.

We will not release any personally identifying information to anyone unless mandated by federal or state laws. Aggregate statistical summaries may be released to third parties, but these statistics will contain no personally identifiable information.

Information Security: GE provides the technical information security services for our website. When you submit your information to your physician's website, that information is converted to a random code. This is called encryption. When the information arrives at its destination, the data is decoded and stored on a secure server.

There are two ways of knowing you are connected to a secure server.

  1. A little closed padlock or unbroken key will appear on the bottom of your browser's window when you access a secure page.
  2. The "http" at the beginning of the URL will change to "https" when you access secure pages.

Other ways we provide Internet security:

  • Email correspondence and notifications from the DAC will not contain any medical information or indication of medical treatment.
  • Our patients and physicians communicate health information through a secure server only. To consult with your physician about health matters, patients must register on their physician's website and communicate through our secure server. When your physician needs to correspond with you, an email will be sent notifying you to logon to your physician's website and read the communication. The notification email contains no health information or any indication of your interaction with your physician.

Notices of Privacy Practices

OUR RESPONSIBILITIES

We are required by law to maintain the privacy of your health information and provide you a description of our privacy practices. We will abide by the terms of this notice.

Uses and Disclosures:

How we may use and disclose Health Information about you. The following categories describe examples of the way we use and disclose health information:

For Treatment: We may use health information about you to provide you treatment or services. We may disclose health information about you to doctors, nurses, technicians, health students, or other medical office personnel who are involved in taking care of you at the medical office. For example: a doctor treating you for a broken leg may need to know if you have diabetes because diabetes may slow the healing process. Different departments of the medical office also may share health information about you in order to coordinate the different things you may need, such as prescriptions, lab work, meals, and x-rays.

For Payment: We may use and disclose health information about your treatment and services to bill and collect payment from you, your insurance company or a third party payer. For example, we may need to give your insurance company information about your surgery so they will pay us or reimburse you for the treatment. We may also tell your health plan about treatment you are going to receive to determine whether your plan will cover it.

For Health Care Operations: Members of the medical staff and/or quality improvement team may use information in your health record to assess the care and outcomes in your case and others like it. The results will then be used to continually improve the quality of care for all patients we serve. For example, we may also combine health information about many patients to evaluate the need for new services or treatment. We may disclose information to doctors, nurses, and students for educational purposes. And we may combine health information we have with that of other medical offices to see where we can make improvements. We may remove information that identifies you from this set of health information to protect your privacy.

We may also use and disclose health information:

  • To researchers conducting research that has been approved by an
  • Institutional Review Board or Denver Arthritis Clinic privacy board;
  • To business associates we have contracted with to perform the agreed upon service and billing for it;
  • To remind you that you have an appointment for medical care;
  • To assess your satisfaction with our services;
  • To tell you about possible treatment alternatives;
  • To tell you about health-related benefits or services;
  • To inform Funeral Directors consistent with applicable law;
  • For population based activities relating to improving health or reducing healthcare costs;
  • For conducting training programs or reviewing competence of health care professionals; and
  • When disclosing information, primary appointment reminders and billing/collections efforts we may leave messages on your answering machine

As required by law, we may also use and disclose health information for the following types of entities, including but not limited to:

  • Food and Drug Administration
  • Public Health or Legal Authorities charged with preventing or controlling disease, injury or disability
  • Correctional Institutions
  • Workers Compensation Agents
  • Organ and Tissue Donation Organizations
  • Military Command Authorities
  • Health Oversight Agencies
  • Funeral Directors, Coroners and Medical Directors
  • National Security and Intelligence Agencies
  • Protective Services for the President and Others


Law Enforcement/Legal Proceedings: We may disclose health information for law enforcement purposes as required by law or in response to a valid subpoena.

State Specific Requirements: Many states have requirements for reporting, including population-based activities relating to improving health or reducing healthcare costs. Some states have separate privacy laws that may apply additional legal requirements. If the state privacy laws are more stringent than federal privacy laws, the state law preempts the federal law.

YOUR HEALTH INFORMATION RIGHTS

Although your health record is the physical property of the healthcare practitioner or facility that compiled it, you have the right to:

Inspect and Copy: You have the right to inspect and obtain a copy of the health information that may be used to make decisions about your care. Usually, this includes medical and billing records, but does not include psychotherapy notes. We may deny your request to inspect and copy in certain very limited circumstances. If you are denied access to health information, you may request that the denial be reviewed. Another licensed healthcare professional chosen by the medical office will review your request and the denial. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.

Amend: If you feel that health information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for the medical office. We may deny your request for an amendment and if this occurs, you will be notified of the reason for the denial.

An Accounting of Disclosures: You have the right to request an accounting of disclosures. This is a list of certain disclosures we make of your health information for purposes other than treatment, payment or healthcare operations where an authorization was not required.

Request Restrictions: You have the right to request a restriction or limitation on the health information we use or disclose about you for treatment, payment or health care operations. You also have the right to request a limit on the health information we disclose about you to someone who is involved in your care or the payment for your care, like a family member or friend. For example, you could ask that we not use or disclose information about a surgery you had.

We are not required to agree to your request. If we do agree, we will comply with your request unless the information is needed to provide you emergency treatment.

Request Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that we contact you at work instead of your home. The DAC will grant requests for confidential communications at alternative locations and/or via alternative means only if the request is submitted in writing and the written request includes a mailing address where the individual will receive bills for services rendered by the facility and related correspondence regarding payment for services.

Please realize, we reserve the right to contact you by other means and at other locations if you fail to respond to any communication from us that requires a response. We will notify you in accordance with your original request prior to attempting to contact you by other means or at another location.

A Paper Copy of This Notice: You have the right to a paper copy of this notice. You may ask us to give you a copy of this notice at any time. Even if you have agreed to receive this notice electronically, you are still entitled to a paper copy of this notice. For a downloadable copy of this notice, please click here.

To exercise any of your rights, please obtain the required forms from the Privacy Official and submit your request in writing.

CHANGES TO THIS NOTICE

We reserve the right to change this notice and the revised or changed notice will be effective for information we already have about you as well as any information we receive in the future. The current notice will be posted in the DAC medical office and include the effective date.

COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with the medical office by contacting the main number and asking for the DAC Privacy Official or with the Secretary of the Department of Health and Human Services. To file a complaint with the medical office, contact the Privacy Official. All complaints must be submitted in writing.

You will not be penalized for filing a complaint.

OTHER USES OF HEALTH INFORMATION

Other uses and disclosures of health information not covered by this notice or the laws that apply to us will be made only with your written permission. If you provide us permission to use or disclose health information about you, you may revoke that permission, in writing, at any time. If you revoke your permission, we will no longer use or disclose health information about you for the reasons covered by your written authorization. You understand that we are unable to take back any disclosures we have already made with your permission, and that we are required to retain our records of the care that we provided to you and documented in the doctor's office or clinic.