Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
SUMMARY OF PRIVACY PRACTICES
Our company is HIPAA-compliant and maintaining the privacy and security of your medical and personal information is important to us. We are a “Business Associate” and are directly liable for complying with the safeguard requirements under HIPAA Rules. This Notice describes how we and any third party that assists in the administration of our services, may use and disclose your protected health information for treatment, payment, or health care operations and for other purposes that are permitted or required by law. This Notice also describes your right to access and control your protected health information. We are required by law to abide by the promises of this notice that is currently in effect.
HIPAA permits us, on behalf of your health plan, to use and disclose your health information for the following purposes more fully described below without your permission. We will obtain your express written authorization before using or disclosing your health information for any other purpose. For example, we will not use your information for marketing or promotional purposes without your written consent. You may revoke this authorization, in writing, at any time. We will never sell your information to a third party.
Treatment. When and as appropriate, we may use and disclose health information about you to facilitate medical treatment or services by providers. For example, we might disclose information about you with your prescribing physician regarding a medication.
Payment. When and as appropriate, we may use and disclose your health information as necessary to determine eligibility for your Plans’ benefits, to facilitate payment for the treatment and services you receive from health care providers, or to coordinate your coverage. For example, we may disclose information about your prescription claims history to a physician to determine whether the health plan will cover the treatment.
Healthcare Operations. When and as appropriate, we may use and disclose your health information for our internal operations, as needed. For example, we may disclose health information in connection with: conducting utilization review and administration improvement; fraud and abuse detection programs; and general administrative activities on behalf of the health plan. We will not use or disclose your genetic information for underwriting purposes.
Research. When and as appropriate, we may use and disclose health information about you for research purposes only (e.g. to help them look for clients with specific medical needs) so long as the health information does not leave our facilities. In accordance with the HIPAA Privacy Rule, we may use and disclose your de-identified health information for data analytics purposes.
Health Oversight Activities. When and as appropriate, we may disclose health information to a health oversight agency for activities authorized by law.
Subcontractors. We may disclose your health information to our subcontractors. We may from time to time contract with entities (defined as “subcontractors” under HIPAA) to help us administer our benefit to you. This can include disclosing your health information to provide coupons, discount cards and programs that may be outside of the scope of your specific health plan. We require these subconstractors to safeguard the privacy of your information and to only use and disclose your health information as we are permitted to do so under HIPAA.
Uses and Disclosures Required By Law. We will disclose your health information when required by law to do so.
Disclosures for Public Health Activities. When and if appropriate, we may disclose your health information to a government agency authorized (a) to collect data for the purpose of preventing or controlling disease, injury, or disability; (b) to receive reports of abuse, neglect or domestic violence; and/or (c) preventing or reducing any serious threat to any person’s safety or health.
Disclosures for Judicial and Administrative Proceedings. Your health information may be disclosed in response to a court order or in response to a subpoena, search warrant, discovery request, or other lawful process when certain legal requirements are satisfied.
Health Plan Sponsor. We may release certain health information about you to your health plan sponsor if needed to facilitate claims payments or to administer your health plan.
Worker’s Compensation. We may release health information about you for worker’s compensation or similar programs as permitted by law.
Coroners, Medical Examiners, and Funeral Directors. We may release health information to a coroner or medical examiner if an individual dies and we hold needed information.
Organ and Tissue Donation. If you are an organ donor, we may release health information to organizations that handle organ procurement or organ, eye, or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.
Military and Veterans If you are a member of the armed forces, we may release health information about you as required by military command authorities. We may also release health information about foreign military personnel to the appropriate foreign military authority.
Disclosures for Specialized Government Functions. We may disclose your health information as required to comply with governmental requirements for national security reasons or for protection of certain government personnel or foreign dignitaries.
We will always try to ensure that the medical information used or disclosed is limited to a “Designated Record Set” and to the “Minimum Necessary” standard, including a “limited data set,” as defined in HIPAA and ARRA for these purposes.
YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION.
Please contact the Privacy Officer identified at the bottom of this Notice if you have any questions concerning the manner in which you may exercise any of these rights or to obtain any document or form referenced below.
Right to Inspect and Copy. You have the right to inspect and obtain a copy of your health information maintained by us in a designated record set. To do so, you must complete a specific form, which will be provided upon request. If you request copies, we may charge a reasonable fee for the costs of copying, mailing, or other supplies associated with your request. We may deny your request to inspect and copy in certain very limited circumstances. If we deny access to your health information, you may request that the denial be reviewed.
Right to Request Amendment. If you feel that your records contain inaccurate or incomplete information, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for the Company. To request an amendment, you must complete a specific form providing information we need to process your request, including the reason that supports your request.
Right to an Accounting of Disclosures. You have the right to request a list of disclosures of your health information we have made, with certain exceptions defined by law. The list of disclosures will not include disclosures of information made: (1) for treatment, payment, and health care operations purposes; (2) to correctional institutions or law enforcement officials; and (3) other disclosures for which federal law does not require the Company to provide an accounting. To request this list, you must complete a specific form providing information we need to process your request.
Right to Request Restrictions. You have the right to request a restriction on our uses and disclosures of your health information for treatment, payment, or health care operations. You also have the right to request a limit on the health information we disclose about you to someone who is involved in your care or the payment for your care, like a family member or friend. You must complete a specific form providing information we need to process your request. We are not required to agree to your request and only our Privacy Officer has the authority to agree to such a request.
Right to Request Alternative Methods of Communication. You have the right to request that we communicate with you about medical matters in a certain way. You must complete a specific form providing information needed to process your request. The Privacy Officer is the only person who has the authority to act on such a request. We will not ask you the reason for your request, and we will accommodate all reasonable requests in a reasonable manner.
Right to Appoint an Agent. If you have a legal guardian or have exercised a power of attorney document for someone to act on your behalf, then that person may take action and exert your rights to your health information on your behalf. We will confirm that any third party has the right to act on your behalf before providing any information to any third party.
Breach Notification. We understand that health information about you is personal and we are committed to protecting your health information. Furthermore, we will notify you following the discovery of any breach of your unsecured protected health information as defined in the HITECH Act. You will receive such notice in writing via first-class mail, unless you previously agreed to an alternative form of notice or if we do not have a current address for you we will provide substitute notice of breach in compliance with applicable law. Your notice of breach shall be provided without unreasonable delay and in no case later than sixty (60) days following the discovery of a breach. If you have any concerns regarding any possible unauthorized use or disclosure of your health information and/or any breach notification made by us, you should contact the Privacy Officer.
Right to File Complaint. If you believe your privacy rights have been violated by us, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. To file a complaint with us, please contact the Privacy Officer at the contact information listed below. All complaints must be submitted in writing. You will not be penalized for filing a complaint.
Effective date: May 1, 2021
If you have any questions about this Notice, please contact:
Attn: Privacy Officer
Rx Savings, LLC
5440 W. 110th Street, Suite 200
Overland Park, KS 66211
Toll Free: 1-800-268-4476