HIPAA Privacy Notice

COMPSYCH CORPORATION

Notice of Privacy Practices (Effective April 14, 2003)

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.  PLEASE REVIEW IT CAREFULLY.

ComPsych Corporation is committed to maintaining the confidentiality of all information it receives.  ComPsych is required by law to maintain the privacy of Protected Health Information (“PHI”) and to provide all individuals with notice of ComPsych’s legal duties and privacy practices with respect to PHI.  The purpose of this notice is to inform you of how ComPsych may use and disclose PHI.  This notice also describes your patient rights, and informs you of how to contact ComPsych.  ComPsych will abide by the terms set forth in this Notice.

Uses and Disclosure of PHI without your authorization

Your PHI will be used by ComPsych to ensure that you receive the services covered by your benefit plan.  ComPsych may use or disclose PHI as described below without your authorization for purposes of treatment, payment or health care operations.  The following are examples of how information is used and disclosed for such purposes:

When you contact ComPsych, we may ask you certain questions to determine how we can best help you.  Once we gather information, we will identify the service provider(s).  In some situations, we may need to contact the provider(s) to discuss your care and coordinate the referral.  Once any referrals are made, we may send the provider(s) information including confirmation of your referral.

When a provider bills ComPsych for services, the claim will be evaluated for payment.  In the event ComPsych is not responsible for payment, ComPsych will notify the provider of the denial.

Outside auditors and other third parties may gather various information from ComPsych to track the quality of services ComPsych provides.

The following are other circumstances where ComPsych may disclose PHI without your authorization:

1) To comply with applicable law; 2) for specified public health activities and purposes; 3) for health oversight activities; 4) in judicial or administrative proceedings in response to a legal order or other lawful process; 5) to the police or other law enforcement officials as required by law or in compliance with a court order or other process authorized by law; 6) to prevent or lessen a serious and imminent threat to the health or safety of an individual or the public; 7) to units of the government with special functions, such as the U.S. military or the U.S. Department of State; or 8) as necessary to comply with workers’ compensation laws.

De-identified health information may be used to report aggregate utilization of services to your employer or group health plan. Such reporting is anonymous, meaning that your name or other personally identifying information will never be disclosed to your employer or group health plan in these reports.

Uses and Disclosure of PHI that require your authorization

ComPsych’s use or disclosure of your PHI other than those exceptions listed above as permitted in this Notice of Privacy Practices will be made only with your written authorization.

More specifically ComPsych must obtain your authorization for: 1) uses and disclosures of psychotherapy notes with limited exceptions; 2) use and disclosure of your PHI made for marketing purposes; 3) prior to making a communication of your PHI for which ComPsych may receive payment; and 4) certain PHI that is “highly confidential information” such as information about mental health and developmental disabilities, alcohol or drug abuse, genetic testing and HIV/AIDS.

If you do provide authorization for use or disclosure of PHI listed above or any other disclosure not specifically permitted in this Notice of Privacy Practices, you have the right to revoke such authorization at any time to stop any future uses and/or disclosures.  Any revocation will not apply to disclosures made prior to the revocation.

Your Patient Rights

You have the right to request to inspect and copy your PHI that ComPsych maintains.  Under certain circumstances, ComPsych may deny your request. ComPsych may charge a fee for all costs associated with your request.

You have the right to request that ComPsych amend your PHI that ComPsych maintains.  Under certain circumstances, ComPsych may deny your request. Your request must include a reason supporting the requested amendment.

You have the right to request an accounting of disclosures.  This accounting will not include disclosures that were made for purposes of treatment, payment or health care operations or disclosures made pursuant to your Authorization or disclosures to you.  Your request must state the specific time period.  An accounting is not available for disclosures made prior to April 14, 2003.  The first accounting you request in any 12 month period shall be provided at no cost.  For any additional requests, ComPsych may charge a fee.

You have the right to request that ComPsych restrict its use or disclosure of your PHI when carrying out treatment, payments or health care operations.  It is important to understand that ComPsych is not required to agree to your request.  All requests must specifically state what information you want to limit and to whom the limitation applies.

You have the right to request that ComPsych communicate with you in a specific manner.

You have the right to restrict certain disclosures of PHI to a health plan where you pay out of pocket in full for the healthcare item or service.

You have the right to be notified following a breach of your unsecured PHI.

You have the right to receive a paper copy of this Notice.

Contact

If you need further information about matters covered by this Notice, all requests must be sent to the privacy official through electronic or written communication. Please document your request and send it to ComPsych via email: records@compsych.com or mailed to: ComPsych Corporation, 455 N. Cityfront Plaza Drive, 13th Floor, Chicago, IL 60611, Attn: Privacy Official. For urgent matters, you may call 312-660-1076 in addition to submitting your documented request.

If you believe that your privacy rights have been violated, you may contact ComPsych directly or the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for reporting a violation of your privacy rights. ComPsych reserves the right to change its privacy practices at any time and any such change shall apply to all PHI ComPsych maintains, including information created or received by ComPsych prior to issuing a new Notice. If ComPsych materially changes its privacy practices, this Notice shall be amended and disseminated to all individuals.

Si require que este documento sea traducido, comuniquese al numero 1-888-664-4225. Updated 02/2023