Patient Rights and Privacy

We are required under the federal health care privacy rules (the “Privacy Rules”), to protect the privacy of your health information, which includes information about your health history, symptoms, test results, diagnoses, treatment, and claims and payment history (collectively, “Health Information”). We are also required to provide you with this Privacy Notice regarding our legal duties, policies and procedures to protect and maintain the privacy of your Health Information. We are required to follow the terms of this Privacy Notice unless (and until) it is revised. We reserve the right to change the terms of this Privacy Notice and to make the new notice provisions effective for the Health Information that we maintain and use, as well as for any Health Information that we may receive in the future. Should the terms of this Privacy Notice change, we will make a revised copy of the notice available to you. Revised Privacy Notices will be available at our Facilities for individuals to take with them and we will post a copy of revised Privacy Notices in a prominent location in our Facilities.

Uses and Disclosures Which Require Patient Opportunity to Verbally Agree or Object

Under the Privacy Rules, we are permitted to use and disclose your Health Information: (a) for the creation of facility directories, (b) to disaster relief agencies, and (c) to family members, close personal friends or any other person identified by you, if the information is directly relevant to that person’s involvement in your care or treatment. Except in emergency situations, you will be notified in advance and have the opportunity to verbally agree or object to this use and disclosure of your Health Information.

Uses and Disclosures Which Require Written Authorization

As required by applicable law, all other uses and disclosures of your Health Information (not described above) will be made only with your written permission, which is called an Authorization. For example:

Psychotherapy Notes

If we maintain psychotherapy notes, we must obtain your Authorization for any use or disclosure of such psychotherapy notes, except: to carry out the following treatment, payment, or health care operations: (a) use by the originator of the psychotherapy notes for treatment; (b) use or disclosure by us for our own training programs in which students, trainees, or practitioners in mental health learn under supervision to practice or improve their skills in group, joint, family, or individual counseling; or (c) use or disclosure by us to defend ourselves in a legal action or other proceeding brought by you.

Certain Marketing Purposes

If we receive financial remuneration in exchange for making a marketing communication we must obtain your Authorization for any use or disclosure of protected health information other than a face-to-face communication made by us to you, or for a promotional gift of nominal value provided by us.

Sales of Health Information

We must obtain your Authorization for any sale of your Health Information and such Authorization will state that the disclosure will result in our receiving remuneration.

Revoking Your Authorization

You may revoke your Authorization in writing at any time. The revocation of your Authorization will be effective immediately, except to the extent that: we have relied upon it previously for the use and disclosure of your Health Information; if the Authorization was obtained as a condition of obtaining insurance coverage where other law provides the insurer with the right to contest a claim under the policy or the policy itself; or where your Health Information was obtained as part of a research study and is necessary to maintain the integrity of the study.

General Uses and Disclosures

Under the applicable law, we are permitted to use and disclose your Health Information for the following purposes, without obtaining your permission or Authorization:

• Treatment - We are permitted to use and disclose your Health Information in the provision and coordination of your healthcare. For example, we may disclose your Health Information to your primary healthcare provider(s), consulting providers, and to other health care personnel who have a need for such information for your care and treatment.
• Payment - We may use and disclose your Health Information so that the treatment and services you receive may be billed to and payment may be collected from you, an insurance company or other third party, including determining the applicability of any health insurance coverage. For example, a bill sent to your insurance company may include information that identifies you, your medical information, and the procedures and supplies used in your treatment.
• Healthcare Operations - East Alabama Health Care Authority is a health care authority organized according to the laws of the State of Alabama and is also a hybrid entity as that term is defined by 45 CFR 164.504(a). The different healthcare providers of East Alabama Health Care Authority may share your Health Information with East Alabama Health Care Authority for its health care operation purposes described in this notice. We are permitted to use and disclose your Health Information for our health care operations, including, but not limited to: quality assurance, auditing, licensing or credentialing activities, and for educational purposes. For example, we can use your Health Information to internally assess our quality of care provided to patients.
• Uses and Disclosures Required by Law - We may use and disclose your Health Information when required to do so by law, including, but not limited to reporting abuse, neglect and domestic violence, in response to judicial and administrative proceedings, in responding to a law enforcement request for information; or in order to alert law enforcement to criminal conduct on our premises.
• Regulatory Agencies - We may disclose your Health Information to a healthcare oversight agency for activities authorized by law, including, but not limited to, licensure investigations and inspections. These activities are necessary for the government and certain private health oversight agencies to monitor the healthcare system, government programs, and compliance with civil rights.
• Threats to Health and Safety - We may use or disclose your Health Information if we believe, in good faith, that the use or disclosure is necessary to prevent or lessen a serious or imminent threat to the health or safety of a person or the public, or is necessary for law enforcement to identify or apprehend an individual.
• Refill Reminders, Care Coordination, Alternative Therapies - We may provide you with refill reminders about a drug or biologic that is currently being prescribed for you, but only if any financial remuneration received by us in exchange for making the communication is reasonably related to our cost of making the communication. Except where we receive financial remuneration in exchange for making the communication, we may communicate with you for the following treatment and healthcare operations purposes: (a) for your treatment including case management or care coordination, or to direct or recommend alternative treatments, therapies, healthcare providers, or settings of care; (b) to describe a health-related product or service (or payment for such product or service) that is provided by, or included in a plan of benefits, including communications about a healthcare provider network or health plan network; replacement of or enhancements to, a health plan; and or (c) for case management or care coordination, contacting of individuals with information about treatment alternatives, and related functions to the extent these activities are not considered treatment.

Patient Rights

You have the following rights concerning your Health Information:

Right to Receive Written Notification of a Breach of Your Unsecured Health Information

You have the right to receive written notification of a breach of your unsecured Health Information if it has been accessed, used, acquired, or disclosed in a manner not permitted by the Privacy Rules, which compromises the security or privacy of your Health Information.

Right to Inspect and/or Copy Your Health Information From The Facilities

Upon written request to East Alabama Medical Center, you have the right to inspect and copy your own Health Information contained in a designated record set maintained by or for the Facilities. A “designated record set” contains medical and billing records and any other records that we use for making decisions about you. However, we are not required to provide you access to all the Health Information that we maintain.

Right to Request Restrictions on the use and Disclosure of Your Health Information from The Facilities

You have the right to request restrictions on the use and disclosure of your Health Information for treatment, payment and healthcare operations. We will consider, but do not have to agree to, such requests. However, we must agree to restrict a disclosure of Health Information about you to a health plan if: (a) the disclosure is for the purpose of carrying out payment or health care operations and is not otherwise required by law; and (b) the Health Information pertains solely to a healthcare item or service for which you, or someone other than the health plan on your behalf, has paid in full. In order to request restrictions on the use and disclosure of your Health Information maintained by other covered functions of East Alabama Health Care Authority other than the Facilities, you should direct your written request directly to the particular covered function.

Right to Request an Amendment of Your Health Information From The Facilities

You have the right to request an amendment of your Health Information. We may deny your request if we determine that you have asked us to amend information that: was not created by us, unless the person or entity that created the information is no longer available; is not Health Information maintained by or for us; is Health Information that you are not permitted to inspect or copy; or we determine that the information is accurate and complete.

Right to an Accounting of Disclosures of Your Health Information From The Facilities

You have the right to receive an accounting of disclosures of your Health Information made by us. With respect to Health Information contained in paper form, our accounting will not include: disclosures related to treatment, payment or healthcare operations; disclosures to you; disclosures based upon your Authorization; disclosures to individuals involved in your care; incidental disclosures; disclosures to correctional institutions or law enforcement officials; disclosures for facility directories; disclosures that are part of a Limited Data Set; or disclosures that occurred prior to April 14, 2003 or as otherwise allowed by the Privacy Rules.

Right to Alternative Communications From The Facilities

You have the right to receive confidential communications of your Health Information by a different means or at a different location than currently provided. Such requests must be in writing.

Right to Receive a Paper Copy of this Privacy Notice

You have the right to receive a paper copy of this Privacy Notice upon request, even if you have agreed to receive this Privacy Notice electronically.

Patient Permissions

We have established a process that allows you to tell us who we may talk to about your health care. This includes insurance information, billing information, and treatment information.

How can I give others permission to get verbal information about me?

Complete the Permission for Verbal Communication of Protected Health Information form to let us know whom we may speak to about your information. Check the appropriate boxes to indicate what information we may discuss.

Does this mean that you will not speak to anyone I haven’t specifically named on the form(s)?

No. If permitted by law, East Alabama Apothecary Specialty Pharmacy may speak to other individuals involved in your care.

How is the information on the form(s) used?

Anytime your designated person(s) call or make requests on your behalf, we will verify the individual has your permission to receive the information and then we will share the information.

What are some examples of when this might be useful?

• If an individual wants to share information with a spouse or significant other
• If an elderly patient wants an adult child to help understand medical treatment instructions
• If an adult child is helping with billing questions
• If a friend is helping a patient with health issues
• If a college student wants information shared with a parent or guardian

What if I change my mind?

You can change or revoke (stop) this process at any time by writing to us at the address shown below:

East Alabama Apothecary Specialty Pharmacy 
665 Opelika Road, Suite 400 
Auburn, AL 36830

What happens if I don’t complete the form(s)?

We will continue to protect your private health information as required by law.

Can the person I designate for verbal communications also get copies of my medical records?

No, they can only receive verbal information. If you would like to designate someone to get copies of your medical records, complete the form Authorization for Disclosure of Protected Health Information found in the welcome packet, at our pharmacy, or online.

Complaints/Grievances

We want you to be completely satisfied with the care we provide. If you have any issues with your medications, the services rendered, or any other issues related to your order, please contact us directly at 844-797-9607 and speak to one of our staff members.

Patients and caregivers have the right to voice complaints and/or recommendations on services to the pharmacy. Patients and caregivers can do so by phone, fax, writing, or email. We will address your concern(s) within 5 business days. Listed below are platforms in which you may voice your concerns:

Alabama State Board of Pharmacy
Website: https://www.albop.com/Home.aspx
Telephone: 205-981-2280
 

URAC (Accreditation Commission)
Website: https://www.urac.org/complaint/
Telephone: 202-216-9010
 

ACHC (Accreditation Commission) 
Website: https://www.achc.org/complaint-policy-process.html
Telephone: 855-937-2242