Each resident, patient or legally responsible health care representative will receive a notice of the uses and disclosures of his/her Protected Health Information (PHI) that may be made by or on behalf of the facility, and the resident’s right and our facilities' legal duties with respect to the resident’s protected health information (PHI).

Upon admission to the facility, residents will be provided with a copy of our facilities' Privacy Notice relative to protected health information.

Privacy notices are provided in an easy to read language and contain, as a minimum, the following elements:

A statement indicating how medical information about the resident may be used and disclosed and how the resident can obtain access to such information;

A description, including at least one example, of the types of uses and disclosures that the facility is permitted to make for purposes of treatment, payment and healthcare operations, with sufficient detail to place an individual on notice of the uses and disclosures permitted or required;

A description of each of the other purposes for which the facility is permitted or required to use or disclose PHI without the resident’s consent or authorization, with sufficient detail to place an individual on notice of the uses and disclosures permitted or required;

A statement that other uses or disclosures will be made only with the resident’s written authorization, and that the authorization may be revoked in accordance with the policy on authorization;

A statement of the resident’s rights with respect to his/her PHI, and a brief description of how the resident may exercise those rights, including:

• The right to request restrictions on certain uses/disclosures of PHI, and the fact that the facility does not have to agree to such restrictions;
• The right to receive confidential communications of PHI;
• The right to inspect and copy PHI;
• The right to amend PHI; The right to receive an accounting of disclosures of PHI; and
• The right to receive a paper copy of the privacy notice.
• A statement of the facility’s duties with respect to PHI, including statements:
• That the facility is required by law to maintain the privacy of PHI and to provide residents with notice of its legal duties and privacy policies;
• That the facility is required to abide by the terms of its current effective privacy notice; and
• That the facility reserves the right to change the terms of the notice and make the new notice provisions effective for all PHI maintained, along with a description of how the facility will provide residents with the revised notice.

A statement that residents may complain to the facility and to the Secretary of the U. S. Department of Health and Human Services about privacy rights violations, including a brief statement about how a complaint may be filed and an assurance that the resident will not be retaliated against for filing a complaint;

The name, or title, and telephone number of the facility’s HIPAA Compliance Officer to contact for further information; and The effective date of the notice, which may not be earlier than the date printed or published.

A copy of privacy notices issued to residents will be retained for a period of not less than six (6) years from the later of the date of creation or the last effective date.

Oral review of privacy notices will be made by the HIPAA Compliance Officer when such request is made by the resident.