HIPAA and Protected Health Information (PHI)
What is HIPAA?
The Health Insurance Portability and Accountability Act of 1996, the acronym is HIPAA. HIPAA is a federal program that requires that all medical records and other individually identifiable health information used or disclosed by us in any form, whether electronically, on paper, or orally, are kept properly confidential. This Act gives you, the Patient, significant new rights to understand and control how your health information is used. HIPAA provides penalties for covered entities that misuse personal health information. Additional information may be found at the U.S. Department of Health and Human Services website.
What is PHI?
Under HIPAA, Protected Health Information (PHI) means individually identifiable health information.
Notice of Privacy Practice
This notice of privacy, required by law, describes Better Health USA’s commitment to protecting the confidentiality of individuals’ test results and other PHI that are collected and exchanged as part of our direct and/or indirect laboratory services.
Disclosure of Health Information
Better Health USA will not use or disclose Protected Health Information (PHI), except as permitted or required by HIPAA privacy regulations and applicable state privacy laws. Better Health USA has no control over users and/or members whom voluntarily and/or publicly disclose personal information.
PHI may only be used for treatment, payment, or healthcare operations. Other uses and/or disclosures require patient authorization; a patient may revoke authorization. See definitions below:
Treatment – Providing, coordinating, or managing health care and related services by one or more health care providers
Payment – Activities such as obtaining reimbursement for services, billing or collection activities and utilization review.
Health Care Operations – Includes the business aspects of running our laboratory service practice, such as conducting quality assessment and improvement activities, auditing functions, cost-management analysis and customer service.
Patient Authorization and Revocation – Any other uses and disclosures will be made only with your written authorization. You may revoke such authorization in writing and we are required to honor and abide by that written request, except to the extent that we have already taken actions relying on your authorization.
We may also create and distribute de-identified health information by removing all references to individually identifiable information. We may contact you to provide laboratory draw site information or other health-related services that may be of interest to you.