HIPAA allows for the use and disclosure of PHI in certain instances. Below are areas that HealthTrackRx may use and disclose PHI. Please note, some uses and disclosures described may be limited or restricted by state laws or other legal requirements.
Treatment — We may use or disclose PHI for treatment purposes, including disclosure to physicians, nurses, medical students, pharmacies, and other healthcare professionals who provide you with healthcare services or assist in coordination of you care.
Payment — We may use or disclose PHI to bill and collect payment for services we provide. For example, HealthTrackRx may provide PHI to your insurance to receive payment for the health care services provided to you.
Healthcare operations — We may use or disclose PHI for healthcare operations purposes such as evaluating quality of testing and accuracy of results, accreditation, and other administrative and management functions.
Benefits and services — We may use and disclose PHI to inform or advise you of other health-related benefits and services.
Disclosure to you — We may disclose PHI to you or as directed by you to a third party.
Disclosure to those involved in your care — We may disclose PHI to a person who is involved in your care or helps pay for your care.
Personal Representative — We may disclose PHI to your personal representative, as established under applicable law, or to an administrator, executor, or other authorized individual on behalf of your estate.
Business associates — We may disclose PHI to our business associates that are contracted to perform or provide certain business services to us. Our business associates are required to maintain the privacy and confidentiality of your PHI as required by HIPAA and applicable statute and regulations.
Judicial and administrative proceedings — We may disclose your PHI in the course of a judicial or administrative proceeding, including in response to a court or administrative order, subpoena, discovery request, or other lawful process. We may disclose your PHI if required to do so by federal, state, or local law.
Law enforcement and governmental agencies — We may disclose PHI for law enforcement purposes, such as reporting wounds or physical injuries or in response to a court order, warrant, subpoena or summons, or similar process authorized by law. We may also disclose PHI when necessary to (1) identify or locate a suspect, fugitive, material witness, missing person, or victim of a crime; (2) provide information regarding a deceased person; or (3) report criminal conduct. We may also disclose PHI about an individual to a government agency, including social services, if we reasonably believe the individual is a victim of abuse, neglect, or domestic violence. We may disclose PHI of an inmate when requested by a correctional institution or law enforcement official for health, safety, and security purposes.
Public Health — We may disclose PHI for public health activities or concerns, which may include: (1) public health authorities to report, prevent or control disease, injury, or disability; (2) the Food and Drug Administration (FDA) for quality, safety or effectiveness of an FDA-regulated product or activity; (3) a person who may have been exposed to a disease or at risk for contracting or spreading a disease; and (4) when necessary to prevent or lessen a serious or imminent threat to the health or safety of the patient or others.
Governance activities — We may disclose PHI to a healthcare oversight agency for authorized activities such as audits, civil, administrative, or criminal investigations and proceedings, inspections, licensure and/or disciplinary actions, and other activities necessary for appropriate oversight of government benefit programs and compliance with state, federal, and local statutes and regulations.
Research — We may use and disclose PHI for research purposes. In this respect, limited data or records may be viewed by researchers to identify patients who may qualify for a research project or other similar purpose, so long as the researchers do not remove or copy any of the PHI. Prior to the use or disclosure of PHI for research purposes, we will determine whether the research activity poses minimal risk to privacy and whether PHI will be adequately safeguarded.
De-identified Information and Limited Data Sets — We may use and disclose health information that has been “de-identified” by removing identifiers, which makes it unlikely to identify you. We may also disclose limited health information, contained in a “limited data set”. The limited data set does not contain information that directly identifies you. For example, a limited data set may include your city and zip code, but not your name or street address.