Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Who this Notice covers
Your care is provided by independent licensed providers and their practice groups, who are the covered entities for your protected health information under HIPAA; the pharmacies that dispense for you are covered entities for the records they hold. Each of them presents its own Notice of Privacy Practices to you inside the intake, and their notices govern how they use and disclose your information.
Risen Med LLC ("we"), Hillsborough County, Florida, operates the Risen MD programs and handles your health information as a business associate of those providers, under written agreements that require us to protect it. This Notice tells you how we handle the information we hold on their behalf and how you can exercise your rights through us. Where this Notice and a provider's notice differ, the provider's notice controls for the information they hold.
"Protected health information" (PHI) is information that identifies you and relates to your health, care or payment for care.
How we may use and disclose your PHI without your authorisation
- Treatment. To the licensed providers who evaluate and treat you, to the pharmacies that dispense your medication, and to others involved in your care.
- Payment. To process the payment you make for your program, to verify a transaction, and to resolve billing questions.
- Health care operations. For quality review, support, training, compliance, and the administration of the programs.
- As required by law, including to public health authorities, to health oversight agencies, in response to a valid court order or subpoena, to avert a serious threat to health or safety, and as otherwise permitted or required by 45 CFR Part 164.
- Our subcontractors who perform services for us under written agreements requiring them to protect your PHI (for example, the secure platform that hosts your intake and records, cloud hosting, and payment processing).
- To you, and to a personal representative you have designated or who is authorised by law.
Uses that require your written authorisation
We will not use or disclose your PHI for marketing, will not sell your PHI, and will not disclose psychotherapy notes (where any exist) without your written authorisation. You may revoke an authorisation in writing at any time; the revocation does not affect actions already taken.
Your rights
To exercise any right, email support@risenmd.com or write to Risen Med LLC, Hillsborough County, Florida; we will act on the request for the information we hold and forward it to your provider for the records they hold. We may ask you to verify your identity.
- Access. Inspect and obtain a copy of your PHI, including an electronic copy where we hold it electronically. We may charge a reasonable cost-based fee.
- Amendment. Ask us to amend PHI you believe is incorrect or incomplete. We may deny the request in certain cases and will tell you why.
- Accounting of disclosures. Receive a list of certain disclosures we have made of your PHI in the six years before your request (treatment, payment and operations disclosures are excluded by law).
- Restrictions. Ask us to restrict certain uses or disclosures. We are not required to agree, except that we must honour a request to restrict disclosure to a health plan for a service you paid for in full out of pocket — which applies to every program we offer.
- Confidential communications. Ask us to contact you by a particular means or at a particular address.
- Paper copy. Receive a paper copy of this Notice on request, even if you agreed to receive it electronically.
- Breach notification. Be notified if a breach of your unsecured PHI occurs.
Our duties
We are required by law and by our agreements with your providers to maintain the privacy and security of your PHI, to use and disclose it only as those agreements and the law permit, to notify your provider (and, through them or directly as required, you) of a breach of unsecured PHI, and to follow the Notice currently in effect. We reserve the right to change this Notice and to make the new Notice effective for all PHI we hold; the current Notice is always published at byrisenmd.com/notice-of-privacy-practices.
Complaints
If you believe your privacy rights have been violated you may complain to us at support@risenmd.com and to the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights (www.hhs.gov/ocr/privacy/hipaa/complaints, 1-800-368-1019). You will not be retaliated against for filing a complaint.
Acknowledgement
You will be asked to acknowledge receipt of this Notice inside the intake. Your care does not depend on that acknowledgement.
Contact
Privacy contact: Risen Med LLC · Hillsborough County, Florida · support@risenmd.com.