Privacy Policy

EPISCOPAL CHURCH HOME & AFFILIATES LIFECARE COMMUNITY, INC.
“Canterbury Woods”
705 Renaissance Drive
Williamsville, New York 14221
(716) 929-5800
PRIVACY NOTICE
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE
USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS
INFORMATION. PLEASE REVIEW IT CAREFULLY.
The first page of this notice provides a summary of the content within.
Please refer to the full Privacy Notice for a complete description of our privacy practices,
concerning your information, your rights and our responsibilities.
You may review the Privacy Notice now or at a later time. At some point, you should read it
carefully, because it explains: (1) generally, how we use health care information about you;
(2) that we, like other health care providers, may use and disclose health information about you
as part of your treatment, to arrange for payment for health care services, and for our internal
operations; (3) other circumstances where we may use or disclose health-related information
about you (with or without your permission); and (4) the rights you have with respect to your
health information, namely:
a. Your right to receive a copy of this Privacy Notice;
b. Your right to get a copy of your paper or electronic medical record;
c. Your right to receive an accounting of certain disclosures that we make of your
health information;
d. Your right to request restrictions on how we use and disclose your health
information;
e. Your right to request that we communicate with you at alternative locations,
mailing addresses or telephone numbers;
f. Your right to request amendments to your health information;
g. Your right to revoke an authorization that we obtained to disclose your health
information;
h. Your right to complain about suspected violations of your privacy rights;
i. Your right to choose someone to act for you; and
j. Your right to receive prompt notification if a breach occurs that may have
compromised the privacy or security of your health information.
At Canterbury Woods, we take confidentiality seriously. We encourage you to read this Privacy
Notice and keep a copy of this Privacy Notice for your records.
– 2 –
EPISCOPAL CHURCH HOME & AFFILIATES LIFECARE COMMUNITY, INC.
“CANTERBURY WOODS”
NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE
USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS
INFORMATION.
PLEASE REVIEW IT CAREFULLY.
A. OUR POLICY REGARDING YOUR HEALTH INFORMATION
We are committed to preserving the privacy and confidentiality of your health information. This
Privacy Notice describes how Canterbury Woods may use and disclose your protected health
information according to applicable laws and regulations. It also describes your rights with
respect to your protected health information. Your protected health information includes most
information about your physical and mental health, such as symptoms, treatment, test results, and
demographic data, which contain details that can be used to identify you. We will not use or
share your protected health information other than as described in this notice unless you
authorize us to do so in writing. We will never share your protected health information for
marketing or sell your protected health information. We are required by law to maintain the
privacy of your protected health information and to provide you with this Privacy Notice of your
rights, our legal duties and our privacy practices with respect to your protected health
information. We are required to follow the duties and privacy practices described in this notice.
B. OUR THOUGHTS ABOUT YOUR PROTECTED HEALTH INFORMATION
We understand that your medical information is personal to you, and we are committed to
protecting the information about you. As our patient, we create paper and electronic medical
records about your health, our care for you, and the services and/or items we provide to you as
our patient. We need these records to provide for your care and to comply with certain legal
requirements.
C. USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION
You will be or have already been asked to sign a “Consent” allowing us to use and disclose your
Protected Health Information to others to provide you with treatment, obtain payment for our
services, and run our health care operations. This is a broad consent that we obtain on a one time
basis. A consent is different than an “Authorization” and is required because of New York State
law. An Authorization contains an expiration date or expiration event and provides detailed
information about who may receive your protected health information and for what purposes
your protected health information may be disclosed. The Health Insurance Portability and
Accountability Act (“HIPAA”) provides the definition of “Authorization” and spells out what an
authorization should contain and when an authorization is and is not required. Here are
– 3 –
examples of how we may use and disclose your health information with your consent, but
without your authorization:
For Treatment. Canterbury Woods may review and record information in your record about
your treatment and care. We will use and disclose this health information to health care
professionals in order to treat and care for you. For example, a Canterbury Woods physician
may consult with a physician located at an outside facility to determine how to best diagnose and
treat you. We may use your protected health information to remind you that you have an
appointment and to recommend health related benefits or services that may be helpful.
For Payment. Canterbury Woods may use and disclose your Protected Health Information to
others in order for us to bill for your health care services and receive payment. For example, we
may include your health information in our claim to Blue Cross/Blue Shield or Medicare in order
to receive payment for services provided to you. We may also disclose your health information
to other health care providers so that they can receive payment for your services.
For Health Care Operations. We may use and disclose your Protected Health Information to
others for our business operations. For example, we may use Protected Health Information to
evaluate our services, including the performance of our staff, and to educate our staff.
D. USES AND DISCLOSURES WHERE YOU HAVE THE RIGHT TO OBJECT
Facility Directory. Unless you object, we may include general information about you in our
facility/program directory. This information may include your name, location, general condition
and religious affiliation. We may release information in our directory, except for your religious
affiliation, to people who ask for you by name. Your religious affiliation may be given to any
member of the clergy even if they don’t ask for you by name.
Family and Friends Involved in Your Care. Unless you object, we may disclose your
Protected Health Information to a family member or close personal friend, including clergy, who
is involved in your care or payment for that care.
E. WE MAY USE AND DISCLOSE YOUR PROTECTED HEALTH INFORMATION
FOR OTHER SPECIFIC PURPOSES WITHOUT YOUR CONSENT OR
AUTHORIZATION
Disaster Relief. We may disclose your Protected Health Information to an organization
assisting in a disaster relief effort.
Public Health Activities. We may disclose your Protected Health Information for public health
activities including the reporting of disease, injury, vital events, and the conduct of public health
surveillance, investigation and/or intervention. We may also disclose your information to notify
a person who may have been exposed to a communicable disease or may otherwise be at risk of
contracting or spreading a disease or condition if a law permits us to do so.
Health Oversight Activities. We may disclose your Protected Health Information to health
oversight agencies authorized by law to conduct audits, investigations, inspections and licensure
– 4 –
actions or other legal proceedings. These agencies provide oversight for the Medicare and
Medicaid programs, among others.
Personal Representatives. We may disclose your protected health information to or according
to the direction of a person who, under applicable law, has the authority to represent you in
making decisions related to your health. For example, we may disclose your protected health
information to a legal guardian, health care agent or other person who by law is allowed to make
health care decisions for you in the event you are unable to make your own health care decisions.
De-identified Information: We may de-identify your protected health information according to
specific federal rules so that the information does not identify you and cannot be used to identify
you. We may use and disclose your de-identified information. We may also partly de-identify
your protected health information by removing your name, address, telephone number and many
other identifying factors to create a limited data set, which may be used and disclosed for
research purposes. Your protected health information will only be disclosed in the form of a
limited data set to recipients who sign an agreement to use your protected health information for
specific purposes according to law and who agree not to identify you.
Reporting Victims of Abuse, Neglect or Domestic Violence. If we have reason to believe that
you have been a victim of abuse, neglect or domestic violence, we may use and disclose your
Protected Health Information to notify a government authority if required or authorized by law,
or if you agree to the report.
Law Enforcement. We may disclose your Protected Health Information for certain law
enforcement purposes or other specialized government functions.
Judicial and Administrative Proceedings. We may disclose your Protected Health Information
in the course of certain judicial or administrative proceedings.
Research. In general, we will request that you sign a written authorization before using your
Protected Health Information or disclosing it to others for research purposes. However, we may
use or disclose your health information without your written authorization for research purposes
provided that the research has been reviewed and approved by a special Privacy Oversight
Committee and de-identification maintained.
Coroners, Medical Examiners, Funeral Directors, Organ Procurement Organizations. We
may release your health information to a coroner, medical examiners, funeral director or, if you
are an organ donor, to an organization involved in the donation of organs and tissue.
To Avert a Serious Threat to Health or Safety. We may use and disclose your Protected
Health Information when necessary to prevent a serious threat to your health or safety or the
health or safety of the public or another person. However, any disclosure would be made only to
someone able to help prevent the threat.
Military and Veterans. If you are a member of the armed forces, we may use and disclose your
Protected Health Information as required by military command authorities. We may also use and
– 5 –
disclose Protected Health Information about foreign military personnel as required by the
appropriate foreign military authority.
Workers’ Compensation. We may use or disclose your Protected Health Information to
comply with laws relating to workers’ compensation or similar programs.
National Security and Intelligence Activities: Protective Services. We may disclose health
information to authorized federal officials who are conducting national security and intelligence
activities or as needed to provide protection to the President of the United States, or other
important officials.
As Required By Law. We will disclose your Protected Health Information when required by
law to do so.
Treatment Alternatives and Health-Related Benefits. Canterbury Woods may contact you to
provide information about treatment alternatives or other health-related benefits and services that
may be of interest to you.
Fundraising. Canterbury Woods may contact you or your designated representative to raise
money to help us operate. We may also share your demographic information with a charitable
foundation that may contact you or your designated representative to raise money on our behalf.
You have the opportunity to opt out or restrict your receiving fundraising communications, by
contacting our Health Information Management Coordinator (“HIM Coordinator”), whose
contact information appears on page 7 of this Privacy Notice.
F. YOUR AUTHORIZATION IS REQUIRED FOR OTHER USES OF YOUR
PROTECTED HEALTH INFORMATION
We will use and disclose your Protected Health Information other than as described in this
Notice or required by law only with your written Authorization. You make revoke your
Authorization to use or disclose Protected Health Information in writing, at any time. To revoke
your Authorization, contact our HIM Coordinator. Contact information is provided on page 7. If
you revoke your Authorization, we will no longer use or disclose your Protective Health
Information for the purposes covered by the Authorization, except where we have already relied
on the Authorization.
G. YOUR RIGHTS REGARDING YOUR PROTECTED HEALTH INFORMATION
You have the following rights with respect to your protected health information. If you wish to
exercise any of these rights, you should make your request to our HIM Coordinator, whose
contact information appears on page 7.
Right of Access to Protected Health Information. You have the right to request, to inspect
and obtain a paper or electronic copy of your Protected Health Information, subject to some
limited exceptions. We will respond to your request for an inspection within 10 days and
generally respond to requests for copies within 30 days. If we need additional time we will
– 6 –
notify you within 30 days to explain the reason for the delay. We may charge a reasonable fee
for our costs in copying and mailing your requested information.
In certain limited circumstances, we may deny your request to inspect or receive copies. If we
deny access to your Protected Health Information, we will provide you with a summary of the
information, and you have a right to request review of the denial. We will provide you with
information on how to request a review of our denial.
Right to Request Restrictions. You have the right to request restrictions on the way we use and
disclose your Protected Health Information for our treatment, payment or health care operations.
You also have the right to restrict your Protected Health Information that we disclose to a family
member, friend or other person who is involved in your care or the payment for your care.
We are not required to agree to your requested restriction, and in some cases, the law may not
permit us to accept your restriction. However, if we do agree to accept your restriction, we will
comply with your restriction except if you are being transferred to another health care institution,
the release of records is required by law, or the release of information is needed to provide you
emergency treatment. To request restrictions, you must submit a written request to our HIM
Coordinator, whose contact information is listed on page 7 of this Privacy Notice. In your
written request, you must identify the specific restriction requested and identify whom you want
the restrictions to apply to. If we deny your request to a restriction, we will notify you. Under
certain circumstances, we may terminate our agreement to a restriction.
If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that
information for the purpose of payment or health care operations with your health insurer. We
will say “yes” unless a law requires us to share that information.
Right to an Accounting of Disclosures. You have the right to request an “accounting” of our
disclosures of your Protected Health Information in the past six (6) years. This is a listing of
certain disclosures of your Protected Health Information made by Canterbury Woods or by
others on our behalf, but does not include disclosures made for treatment, payment and health
care operations or certain other exceptions.
You must submit a request in writing, stating a time period that is within six years from the date
of your request. You are entitled to one free accounting within one 12 month period. For
additional requests, we may charge you our costs.
We will usually respond to your request within 60 days. Occasionally, we may need additional
time to prepare the accounting. If so, we will notify you of our delay, the reason for the delay,
and the date when you can expect the accounting.
Right to Breach Notification. You have the right to be promptly notified if a breach occurs that
may have compromised the privacy or security of your health information.
Right to Request Amendment. If you think that your Protected Health Information is not
accurate or complete, you have the right to request that the we amend such information for as
– 7 –
long as the information is kept in our records. Your request must be in writing and state the
reason for the requested amendment. We will usually respond within 60 days, but will notify
you within 60 days if we need additional time to respond, the reason for the delay and when you
can expect our response. We may extend the time by no more than an additional 30 days. We
may deny your request for amendment, and if we do so, we will give you a written denial
including the reasons for the denial and an explanation of your right to submit a written
statement disagreeing with the denial.
Right to a Paper Copy of This Notice. You have the right to obtain a paper copy of this
Notice, even if you have agreed to receive this Notice electronically. You may request a copy of
this Notice at any time. You may obtain a copy if this Notice at our website, www.echa.org or
www.canterburywoods.org.
Right to Request Confidential Communications. You have the right to request that we
communicate with you concerning personal health matters in a certain manner or at a certain
location. For example, you can request that we speak to you only at certain private locations in
the facility. We will accommodate your reasonable requests. We may condition this
accommodation on your providing us with information as to how payment will be handled or by
specifying an alternative address or other method of contact. We will not require you to provide
us with an explanation for the basis of your request.
H. COMPLAINTS
If your believe that your privacy rights have been violated, you may file a complaint. You have
the right to complain to us, and/or to the Secretary of the Department of Health and Human
Services if you believe your privacy rights have been violated. You may complain to us by
contacting the Corporate Compliance Officer, using the contact information below. We will not
retaliate against you for filing a complaint.
The contact person for all issues regarding patient privacy questions and your rights under
the federal privacy standards is our Corporate Compliance Officer, whom you may
contact:
Episcopal Church Home & Affiliates Lifecare Community, Inc.
Canterbury Woods
705 Renaissance Drive
Williamsville, New York 14221
(716) 929-5800
You may file a complaint with the U.S. Department of Health and Human Services Office for
Civil Rights by sending a letter to: 200 Independence Avenue, S.W., Washington, D.C., 20201,
calling 1-877-696-6775 or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/.
– 8 –
I. CHANGES TO THIS NOTICE
We will promptly revise and distribute this Notice whenever there is a material change to the
uses or disclosures, your individual rights, our legal duties, or other privacy practices stated in
this Notice. We reserve the right to change this Notice and to make the revised or new Notice
provisions effective for all Protected Health Information already received and maintained by the
Episcopal Church Home & Affiliates Lifecare Community, Inc. as well as for all Protected
Health Information we receive in the future. We will post a copy of the current Notice in each
facility and on our website. You may obtain a copy by asking our Corporate Compliance Officer
for one, by printing it from our website or by taking a copy from the copies available at our
facility.
J. FOR FURTHER INFORMATION
If you have any questions about this Notice or would like further information concerning your
privacy rights, please contact the Corporate Compliance Officer at (716) 929-5800.
Revised Date of this Notice: 12/31/13; 2015
Doc #01-2719667.1