HIPAA Notice of Privacy Practices
Last updated: [Insert Date — requires legal review before publication]
This Notice of Privacy Practices describes how protected health information about you may be used and disclosed and how you can access this information. Please review it carefully. This Notice applies to protected health information maintained by [Medical Group Name], [Provider Group Name], or other covered healthcare entities that provide care through or in connection with HealOvi services. HealOvi itself may provide technology, administrative, support, or care coordination services and may act as a business associate of a covered entity.
1. Our Responsibilities
We are required by law to maintain the privacy and security of your protected health information, provide this Notice of our legal duties and privacy practices, follow the terms of the Notice currently in effect, and notify you if a breach occurs that may have compromised the privacy or security of your protected health information.
2. Treatment
We may use and disclose your information to provide, coordinate, or manage your care. For example, a provider may review your intake form, medical history, lab results, prescriptions, or communications.
3. Payment
We may use and disclose your information to bill and collect payment, process transactions, or support financial operations.
4. Healthcare Operations
We may use and disclose your information for quality review, provider review, compliance, training, audits, business management, care coordination, technology operations, and service improvement.
5. Pharmacies and Labs
We may disclose information to pharmacies, pharmacy networks, labs, and diagnostic partners to support prescriptions, fulfillment, testing, and related services.
6. Business Associates
We may share information with vendors that perform services on our behalf, such as technology hosting, payment processing, support tools, compliance services, secure communications, and operational analytics, when permitted by law and subject to appropriate agreements.
7. Legal Requirements
We may disclose information when required by law, court order, subpoena, regulation, investigation, or government request.
8. Public Health and Safety
We may disclose information for public health activities, adverse event reporting, product safety, disease control, abuse or neglect reporting, or to prevent serious threats to health or safety.
9. Health Oversight
We may disclose information to health oversight agencies for audits, investigations, inspections, licensure, and compliance.
10. Uses and Disclosures Requiring Your Authorization
We will obtain your written authorization for uses and disclosures that require authorization under HIPAA, such as most uses and disclosures of psychotherapy notes where applicable, certain uses and disclosures for marketing, sale of protected health information, and other uses not described in this Notice when authorization is required by law. You may revoke an authorization in writing, except to the extent we have already relied on it.
11. Your Rights
You have the right to request access to your health records, request a copy of your health records, request corrections to your health records, request confidential communications, request restrictions on certain uses and disclosures, request an accounting of certain disclosures, receive a paper copy of this Notice, and file a complaint if you believe your privacy rights have been violated.
12. Restriction for Services Paid Out of Pocket
If you pay out of pocket in full for a healthcare item or service and request that we not disclose information about that item or service to your health plan for payment or healthcare operations, we will comply where required by law.
13. Complaints
You may file a complaint with us by contacting our Privacy Officer via the contact form at healovi.com/contact (select 'Privacy or legal inquiry') or by mail at [Legal Entity Address — requires attorney review]. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.
14. Changes to This Notice
We may change this Notice and make the revised Notice effective for information we already have and information we receive in the future. The current Notice will be posted on our website.
Questions? Contact us via our contact form.