PrivacyPolicy
Use and Disclosure of Protected Health Information (PHI)
Policy Statement
Turning Points Behavioral Health is committed to protecting the confidentiality of PHI and usingor disclosing it only for legitimate purposes, as permitted or required by law.
Permitted Uses and Disclosures Without Authorization
PHI may be used or disclosed without the client’s written authorization in the following
circumstances:
- Treatment: To coordinate or manage the client’s care, including communication between healthcare professionals or referrals.
- Payment: To bill and receive payment for services from insurance companies or other payers.
- Healthcare Operations: For business operations such as quality assurance, staff training, and internal audits.
- Emergency Situations: If a client poses a danger to themselves or others or in the case of a medical emergency.
- Public Health and Safety: To report suspected abuse or neglect, comply with mandated reporting laws, and respond to health threats.
- Legal and Regulatory Requirements: In response to court orders, subpoenas, or to comply with other legal obligations.
Uses and Disclosures Requiring Authorization
PHI will not be used or disclosed for the following purposes without the client’s explicit written authorization:
- Marketing or promotional activities
- Psychotherapy notes (in most cases)
- Sale of PHI
- Any other uses not explicitly permitted by HIPAA
Clients have the right to revoke their authorization at any time in writing, except to the extent action has already been taken based on that authorization.
Individual Rights Regarding Protected Health Information
Purpose
To outline the rights of clients concerning their protected health information and the procedures for exercising those rights, in compliance with HIPAA. (See Informed Consent in Intake Packet)
Client Rights
- Right to Access
Clients may request to review or obtain a copy of their health records. Requests must be submitted in writing. A reasonable fee may be charged for copies. - Right to Request an Amendment
If a client believes their record contains incorrect or incomplete information, they may request a correction in writing. We may deny the request but will document it in the record. - Right to an Accounting of Disclosures
Clients may request a list of disclosures made of their PHI (excluding those made for treatment, payment, or operations) for up to six years prior to the request. - Right to Request Restrictions
Clients may ask to restrict certain uses or disclosures of their PHI. We are not required to agree to all requested restrictions, except in cases where the disclosure is to a health plan for services paid in full out of pocket. - Right to Request Confidential Communications
Clients may request that communications be sent to an alternative address or via a specific method (e.g., email or phone). Requests must be reasonable and submitted in writing. - Right to File a Complaint
Clients who believe their privacy rights have been violated may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services. Retaliation for filing a complaint is strictly prohibited.
