Privacy
Women’s Health Care of Western Colorado, P.C.
Revisions to privacy notice: effective 02/17/2010
BREACH NOTIFICATION
A breach of unsecured PHI is the unauthorized acquisition, access, use, or disclosure of PHI which compromises the security or privacy of the information. A breach does not occur in certain circumstances listed in the HITECH legislation (ARRA, Pub. L. 111-5, Section 13001, et seq. (2009)). If the practice determines that a breach of unsecured PHI has occurred, it will notify individuals affected by the breach without unreasonable delay but not later than 60 calendar days after discovery of the breach. The practice will send notice to each affected individual by first class mail to the last known address. In situations where the practice deems possible the imminent misuse of unsecured PHI, the practice may provide other forms of notice, such as by telephone or email, in addition to the written notice. If the practice has insufficient or out-of-date contact information for 10 or more individuals affected by the breach, we will either conspicuously post a substitute notice on our website homepage for 90 days or in a major print or broadcast media in the geographic areas where the individuals affected by the breach likely reside. The substitute notice will include our toll-free number. If the breach of unsecured PHI affects 500 or more individuals, the notice will also be provided to major media outlets serving the relevant State or jurisdiction, and to the Department of Health and Human Services.
Right to Request Restrictions. You have the right to request a restriction or limitation on the Health Information we use or disclose: (a) for treatment, payment, or health care operations; or (b) to someone involved in your care or payment for your care, like a family member or friend; or (c) to a health plan for payment or health care operations if the Health Information pertains solely to an item or service for which we have been paid out of pocket in full. We are not required to agree to requests under (a) or (b). We must comply with a request under (c). If we agree, or when we must comply, with your request for restricted disclosures, we will comply with your request unless the information is needed to provide you with emergency treatment. To request a restriction, you must make your request, in writing, to the Privacy Officer/Office Manager.