Strict Security Measures
Uses and Disclosures of Health Information
We may use or disclose identifiable health information about you without your authorization for public health purposes, for auditing purposes, or for reporting purposes to governing state agencies. In any other situation, we will ask for your written authorization to disclose information. You can later revoke that authorization to stop any further uses or disclosures. We may change our policies at any time. Before we make a significant change in our policies we will change our notice and send the new notice to you. You can also request a copy of our notice at any time. For more information about our privacy practices, contact the person listed below.
Individual Rights
You may request in writing that we not use or disclose your information for treatment payment and administrative purposes except when specifically authorized by you, when required by law or in emergencies. We will consider your request but are not legally required to accept it.
Complaints
If you decide to contact the undersigned person with a complaint, or if you send a written complaint to the U. S. Department of Health and Human Services, you will not suffer any retaliation.
Our Legal Duty
If you have any questions or complaints, please contact The Kidz Club HIPAA Compliance Officer at (502) 210-5538.
Media Release
KY PPEC, INC. HIPPA NOTICE OF PRIVACY PRACTICES
EFFECTIVE APRIL 14, 2003 (REVISED NOVEMBER 2021)
THIS NOTICE DESCRIBES HOW PROTECTED HEALTH INFORMATION (PHI) ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
if you have any question about this Notice, please contact The Kidz Club Support Center 1101 Herr Lane, Louisville, KY 40222 502-210-5538
Our Pledge Regarding Your PHI
We understand that your PHI is personal. We are committed to protecting this information. We create a record of the care and services that you receive from us. We need this record to provide you with quality care and to comply with certain legal requirements. This Notice tells you about the ways in which KY PPEC, Inc. may use and disclose your PHI, your rights to your PHI, and our obligations regarding the use and disclosure of your PHI.
We are required by law to:
- Maintain the privacy and security of your PHI;
- Provide you with this Notice of our legal duties and privacy practices with respect to your PHI;
- Abide by the terms of the Notice that is in effect at the time we use or disclose your PHI; and
- Notify you promptly following a breach of unsecured PHI that may have compromised the privacy or security of your PHI.
The law provides you with certain rights as described in this Notice. We will not use or share your PHI other than as described here unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.
For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html
How We May Use and Disclose Your PHI
- To prevent or control disease, injury, or disability;
- To report births and deaths;
- To report child abuse or neglect;
- To report adverse reactions to medications or problems with products;
- To notify people of recalls of products they may be using;
- To notify a person or organization required to receive information on FDA-regulated products;
- To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition; and/or
- To notify the appropriate government authority if we believe a client has been the victim of abuse, neglect, or domestic violence. We will only make this disclosure if you agree or when required or authorized by law.
- Public Health. We may disclose PHI for public health activities and purposes to a public health authority that is permitted by law to collect or receive the information. The disclosure will be made for the purpose of controlling disease, injury, or disability. We may also disclose your PHI, if directed by the public health authority, to a foreign government agency that is collaborating with the public health authority.
- Suspected Abuse, Neglect, or Domestic Violence. We may disclose your PHI to a public health authority that is authorized by law to receive reports of abuse, neglect, or domestic violence. In addition, we may disclose your PHI if we believe that you have been a victim of abuse, neglect, or domestic violence to the governmental entity or agency authorized to receive such information. In this case, the disclosure will be made consistent with the requirements of applicable federal and state laws.
- Food and Drug Administration. We may disclose your PHI to a person or company required by the Food and Drug Administration to report adverse events, product defects or problems, biologic product deviations, track products, to enable product recalls, to make repairs or replacements, or to conduct post-marketing surveillance, as required.
- Communicable Diseases. We may disclose your PHI, if authorized by law, to a person who may have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading the disease or condition.
- in reporting certain injuries, as required by law, gunshot wounds, burns, injuries to perpetrators of crime;
- in response to a court order, subpoena, warrant, summons or similar process;
- to identify or locate a suspect, fugitive, material witness, or missing person:
- Name and address
- Date of birth or place of birth;
- Social security number;
- Blood type or rh factor;
- Type of injury;
- Date and time of treatment and/or death, if applicable; and
- A description of distinguishing physical characteristics.
- about the victim of a crime, if the victim agrees to disclosure, or under certain limited circumstances, we are unable to obtain the person’s agreement;
- about a death we believe may be the result of criminal conduct;
- about criminal conduct at our Center; and
- in emergency circumstances to report a crime; the location of the crime or victims; or the identity, description, or location of the person who committed the crime.
- Military and Veterans: If you are a member of the armed forces or separated/discharged from military services, we may release PHI about you as required by military command authorities or the Department of Veterans Affairs as may be applicable. We may also release PHI about foreign military personnel to the appropriate foreign military authorities.
- National Security and Intelligence Activities: We may disclose PHI about you to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.
- Protective Services for the President and Others: We may disclose PHI about you to authorized federal officials so they may provide protection to the President, other authorized persons, or foreign heads of state or conduct special investigations.
- Inmates: If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may disclose PHI about you to the correctional institution or law enforcement official. This disclosure would be necessary (1) for the institution to provide you with health care; (2) to protect your health and safety or the health and safety of others; or (3) for the safety and security of the correctional institution.
Your Rights Regarding Your PHI
We may deny your request to see and copy in certain very limited circumstances. If you are denied access to your PHI, you may request that the denial be reviewed. Another licensed health care professional chosen by our Center will review your request and the denial. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.
- was not created by us, unless the person or entity that created the PHI is no longer available to make the amendment;
- is not part of the PHI kept by or for the Center;
- is not part of the PHI which you would be permitted to inspect and copy; or
- is accurate and complete.
If we deny your request, we will tell you why in writing within 60 days.
Any amendment we make to your PHI will be shared with those with whom we disclose PHI as previously specified.
The first list you request within a 12-month period will be free. For additional requested lists within the 12-month period, we may charge you a reasonable, cost-based fee for the costs of providing the list. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred. We will mail you a list of disclosures in paper form within 30 days of your request, or notify you if we are unable to supply the list within that time period and by what date we can supply the list; but this date will not exceed a total of 60 days from the date you made the request.
Please note that we are not required to agree to a restriction that you request unless you are asking us to restrict the use and disclosure of your PHI to a health plan and (1) the disclosure is for the purpose of carrying out payment or health care operations and is not otherwise required by law; and (2) the PHI pertains solely to a health care item or service for which you (or any person on your behalf other than the health care plan) pays for “out-of-pocket” and in full.
You may also obtain a copy of this Notice from our website, www.thekidzclub.com.
Changes To This Notice
Complaints
Other Uses of Your PHI
For certain PHI, you can tell us your choices about what we share. If you have a clear preference for how we share your PHI in the situations described below, talk to us. Tell us what you want us to do, and we will follow your instructions.
You have both the right and choice to tell us in advance if you agree or object to the uses and disclosures listed below. If you are not able to tell us your preference, i.e., you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.
In the cases listed below, we will never share your information unless you give us prior, written permission.
1. Marketing Purposes. We must obtain a written authorization from you to use or disclose PHI as part of a marketing effort when required by law. If the marketing involves any direct or indirect compensation to us from a third party, we will disclose that information in the authorization. Simply put, we will not sell your PHI to a third party or Business Associate for the party’s own purpose unless we obtain prior written authorization from you. Your authorization is not needed for face-to-face communications made by us to you to market a product or service or for promotional gifts of nominal value provided by us (i.e., providing a free package of certain products).
Marketing is defined as a communication about a product or service that encourages recipients of the communication to purchase or use of the product or service. Marketing does not include communications made: (1) to describe a health-related product or service (or payment for such product or service) that is provided by us (i.e., using our patient list to announce the arrival of new personnel or the acquisition of new equipment through a general mailing or publication); (2) for your treatment (i.e., providing you with a prescription refill reminder); or (3) for your case management or care coordination, or to direct or recommend alternative treatments, therapies, providers, or settings of care to you (i.e., an endocrinologist sharing your medical record with several behavioral health management programs to determine which program best suits your ongoing needs). The communications described in those three (3) exceptions often are considered to be within the definition of “health care operations” under HIPAA, and thus permissible without your authorization.
2. Sale of Electronic Health Records or PHI. We may not sell your PHI unless a written authorization is signed by you. If the sale or marketing involves any direct or indirect compensation to us from a third party, we will disclose that information in the authorization. An authorization is not needed if the purpose of the exchange is for:
- Your treatment and payment for services;
- Public health purposes;
- Research purposes where the price charged reflects the cost of preparation and transmittal of the information;
- Health Care Operations related to the sale, transfer, merger, or consolidation of KY PPEC, Inc., it entities, sites, and locations;
- Performance of services by a Business Associate on behalf of KY PPEC, Inc.;
- Providing you, when requested, with access to, or a copy of, the PHI maintained about you;
- Other reasons determined necessary and appropriate by law.
3. Psychotherapy Notes. We will not disclose psychotherapy notes unless a written authorization is signed by you except: (1) to carry out the following treatment, payment, or health care operations: (a) use by the originator of the psychotherapy notes for treatment; (b) use or disclosure by us for our own professional training programs in which students, trainees, or practitioners in mental health learn under supervision to practice or improve their skills in group, joint, family, or individual counseling; or (c) use or disclosure to defend ourselves in a legal action or other proceeding brought by you; and (2) a use or disclosure related to DHHS compliance investigations or health oversight activities, to coroners regarding deceased individuals, to prevent a serious and imminent threat, or as required by law.
4. All other uses and disclosures not described in this Notice will only be made with your written Authorization. You may revoke such written authorization in writing unless we have taken action in reliance upon the authorization.
Fundraising Activities: We may use PHI about you to contact you in an effort to raise money for our operations. We may disclose PHI to a foundation related to our Center so that the foundation may contact you in raising money for us. We only will release information, such as your name, address, phone number, and other contact information, demographic information, outcome information, health insurance status, and the dates you received treatment or services from us. You have the right to opt out of receiving such fundraising communications from us. If you do not want KY PPEC, Inc. to contact you for fundraising efforts, please let us know by notifying The Kidz Club Support Center, 1101 Herr Lane, Louisville, KY 40222, 502-210-5538.