Updated 2/8/2019 NOTICE OF PRIVACY PRACTICES This Notice Describes How Medical Information about You May Be Used and Disclosed and How You Can Get Access to This Information PLEASE REVIEW CAREFULLY. If you have any questions about this notice, please contact the Facility Privacy Officer at the contact information listed at the end of this notice. Who Will Follow This Notice: This notice describes the facility’s practices and that of:

• Any health care professional authorized to enter information into your facility chart.
• All departments and units of the facility, including outpatient facilities.
• Any member of a volunteer group allowed to help you while you are in the facility.
• All employees, staff, agents and other facility personnel.
• Health care providers and their authorized representatives that are members of the facility’s organized health care arrangement, or “OHCA.” These health care providers and their authorized representatives will be operationally and/or clinically integrated with the facility, or will otherwise be permitted by law to receive your information. For example, to the extent permitted by law and in accordance with our policies, the facility will share your medical information with physicians who are members of the facility’s medical staff, even if the physician is not employed by the facility.
• All entities, sites and locations within this facility’s system will follow the terms of this notice. They also may share medical information with each other for treatment, payment and health care operations purposes.
• The facility may participate in one or more shared electronic medical records (SEMRs) with other health care providers for treatment, payment, and healthcare operations purposes.  SEMR participants who do not follow this notice will follow their own notice of privacy practices.

Our Pledge Regarding Medical Information: We understand that medical information about you and your healthcare is personal. We are committed to protecting medical information about you. A record is created of the care and services you receive at this facility. This record is needed to provide the necessary care and to comply with legal requirements. This notice applies to all of the records of your care generated by the facility. The terms “information” and “medical information” in this notice include any information that we maintain that reasonably can be used to identify you and that relates to your physical or mental health condition, the provision of health care to you, or the payment for your health care.  Your personal physician may have different policies or notices regarding the physician’s use and disclosure of your medical information in the physician’s office or clinic. This notice will tell about the ways in which the facility may use and disclose medical information about you. Also described are your rights and certain obligations we have regarding the use and disclosure of medical information. The law requires the facility to:

• Make sure that medical information that identifies you is kept private;
• Inform you of our legal duties and privacy practices with respect to medical information about you;
• Notify you if unsecured medical information about you is affected by a breach; and
• Follow the terms of the notice that is currently in effect. This notice is effective as of September 23, 2013.

---

HOW THE FACILITY MAY USE and DISCLOSE YOUR MEDICAL INFORMATION: The following categories describe different ways we may use and disclose medical information about you.  Not every possible use or disclosure within a category will be listed or explained.  However, all of the ways we are permitted to use and disclose medical information will fall within one of these categories.  Except with respect to Highly Confidential Information (described below), we are permitted to use and disclose your health information for the following purposes:

• Treatment. Your medical information may be used to provide you with medical treatment or services. This medical information may be disclosed to physicians, nurses, technicians, and others involved in your care, including employees, contractors, volunteers, students and interns at the facility or outside the facility. This includes using and disclosing your information to treat your illness or injury, to contact you to provide appointment reminders or to give you information about treatment options or other health-related benefits and services that may interest you.
  • For example: A physician treating you for a broken leg may need to know if you have diabetes because diabetes may slow the healing process. The physician may need to tell the dietitian about the diabetes so appropriate meals can be arranged. Different departments of the facility may also share medical information about you in order to coordinate your different needs, such as prescriptions, lab work and X-Rays. The facility also may disclose medical information about you to people outside the facility who may be involved in your medical care after you leave the facility, such as family members, home health agencies, and others who provide services that are part of your care.
• Payment. Your medical information may be used and disclosed so that the treatment and services received at the facility may be billed and payment may be collected from you, your insurance company and/or a third party.
  • For example: To the extent insurance will be responsible for reimbursing the facility for your care, the health plan or insurance company may need information about surgery you received at the facility, so they can provide payment for the surgery. Information may also be given to someone who helps pay for your care. Your health plan or insurance company may also need information about a treatment you are going to receive to obtain prior approval or to determine whether they will cover the treatment.

Please note we will comply with your request not to disclose your health information to your health plan if the information relates solely to a healthcare item or service for which you have paid out of pocket and in full to us. This restriction does not apply to the use or disclosure of your health information for your medical treatment.

• Health Care Operations. Your medical information may be used and disclosed for purposes of furthering day-to-day facility operations. These uses, and disclosures, are necessary to run the facility and to monitor the quality of care our patients receive.
  • For example: Subject to any limitations described in this notice, your medical information may be:
  1. Reviewed to evaluate the treatment and services performed by our staff in caring for you, including peer review bodies or accreditation organizations.
  2. Combined with that of other facility patients to decide what additional services the facility should offer, what services are not needed, and whether certain new treatments are effective.
  3. Disclosed to physicians, nurses, technicians, and students for review and learning purposes.
  4. Disclosed to accountants, attorneys, consultants, and others to make sure we comply with applicable laws.
  5. Combined with information from other facilities to compare how we are doing and see where we can improve the care and services offered. Information that identifies you in this set of medical information may be removed so others may use it to study health care and health care delivery without knowing who the specific patients are.

• Organized Health Care Arrangement: The covered entities participating in an OHCA with the facility will share protected health information with each other, as necessary to carry out treatment, payment, or health care operations relating to the OHCA.
• Limited Data Sets and De-Identified Information: We may use or disclose medical information about you to create a Limited Data Set or de-identified data, and use and disclose such information as permitted by law.
• Census Information: Limited information about you may be used in the census report or patient directory while you are a patient at the facility. This information may include your name, location in the facility, and general condition.  Additionally, your religious affiliation may be disclosed to members of the clergy.  You may restrict of prohibit some or all of the uses or disclosures of this information through the census report or patient directory by notifying the Facility Privacy Officer or another hospital designated individual.
• Individuals Involved in Your Care. Under certain circumstances, we may share your medical information with a family member, guardian or other individuals involved in your care. They may also be told about your condition unless you have requested additional restrictions. In addition, your medical information may be disclosed to an entity assisting in a disaster relief effort, so your family can be notified about your condition, status, and location.  Additionally, we may disclose medical information to a person or entity that will assist in notifying a patient’s family member of the patient’s location, general condition, or death.
• Research. Under certain circumstances, your medical information may be used and disclosed for research purposes.  Federal law permits use of medical information for research purposes either with patient authorization or with approval by an Institutional Review Board or privacy board before any research study begins.  In some situations, limited information may be used before approval of the research study to allow a researcher to determine feasibility of the research.  Institutional Review Boards and privacy boards follow a special review process to protect patient privacy, safety, and welfare.
• Marketing Activities. We may, without obtaining your authorization and so long as we do not receive payment from a third party for doing so, 1) provide you with marketing materials in a face-to-face encounter, 2) give you a promotional gift of nominal value, or 3) tell you about our own health care products and services. We will ask your permission to use your medical information for any other marketing activities or for any disclosure which constitutes a sale of your medical information.
• Fundraising. We may, in some circumstances, perform fundraising activities to raise funds for the facility.  You also have the right to opt out of receiving this type of communication.
• Business Associates. There are some services provided by the facility through contracts with business associates.  For example, the copy service we use when making copies of your records may be a business associate.  When these services are contracted, we may disclose medical information to our business associates so that they may perform the job we have asked them to do.
• Participation in Health Information Exchanges. We may participate in one or more health information exchanges (HIEs) and may electronically share your health information for treatment, payment and permitted healthcare operations purposes with other participants in the HIE – including entities that may not be listed under “Who Will Follow This Notice” on the first page of this notice. Depending on State law requirements, you may be asked to “opt-in” in order to share your information with HIEs, or you may be provided the opportunity to “opt-out” of HIE participation. HIEs allow your health care providers to efficiently access and use your pertinent medical information necessary for treatment and other lawful purposes. We will not share your information with an HIE unless both the HIE and its participants are subject to HIPAA’s privacy and security requirements.
• As Required by Law. Your medical information will be disclosed when required to do so by federal, state, or local authorities, laws, rules and/or regulations.
• Lawsuits and Disputes. If you are involved in a lawsuit or a dispute, your medical information will be disclosed in response to a court or administrative order.  We may also disclose your medical information in response to a subpoena, discovery request, or other lawful process when we are legally required to respond.
• Law Enforcement. Your medical information may be disclosed if requested by a law enforcement official:
  1. In response to a court order, subpoena, warrant, summons or similar process;
  2. To identify or locate a suspect, fugitive, material witness, or missing person;
  3. About the victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement;
  4. About a death we believe may be the result of criminal conduct;
  5. About criminal conduct on the facility’s premises; or
  6. In emergency circumstances to report a crime; the location of the crime or victims; or the identity, description or location of the person who committed the crime.
• National Security and Intelligence Activities. Your medical information will be released to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.
• Protective Services for the President and Others. Your medical information may be disclosed to authorized federal officials, so they may provide protection to the President, other authorized persons or foreign heads of state or conduct special investigations.
• Serious Threat to Health or Safety. Your medical information may be used and disclosed when consistent with applicable law and ethical standards in order to prevent or lessen a serious and imminent threat to the health and safety of the public or a person. Any disclosure, however, would only be to someone able to lessen or prevent the threat.
• Health Oversight Activities. Your medical information may be disclosed to a health oversight facility for activities authorized by law. These oversight activities include, for example, audits, investigations, inspections, and licensure. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws.

• Organ and Tissue Donation. If you are an organ or tissue donor, your medical information may be released to organizations that handle organ procurement or organ, eye and tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.
• Medical Devices. Your social security number and other required information will be released in accordance with federal laws and regulations to the manufacturer of any medical device(s) you have implanted or explanted during this hospitalization and to the Food and Drug Administration, if applicable. This information may be used to locate you should there be a need with regard to such medical device(s).
• Military and Veterans. If you are a member of the armed forces, your medical information may be released as required by military command authorities. If you are a member of the foreign military personnel, your medical information may be released to the appropriate foreign military authority.
• Workers’ Compensation. If you seek treatment for a work-related illness or injury, we may disclose medical information in accordance with state-specific laws regarding workers’ compensation claims or other similar programs, established by law, that provide benefits for work-related injuries or illness without regard to fault.
• Public Health Activities. Your medical information may be used and disclosed for public health activities. These activities generally include the following:
  1. To prevent or control disease, injury or disability;
  2. To report births and deaths;
  3. To report suspected child abuse or neglect;
  4. To report reactions to medications or problems with products;
  5. To notify people of recalls of products they may be using;
  6. To notify a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition;
  7. To notify the appropriate government authority if we believe a patient has been the victim of abuse, neglect or domestic violence. We will only make this disclosure if you agree or when required or authorized by law.
• Coroners, Medical Examiners, and Funeral Directors. Your medical information may be released to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also release medical information about patients of the facility to funeral directors as necessary to carry out their duties.
• Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may release medical information about you to the correctional institution or law enforcement official. This release would be necessary for the following reasons:
  1. For the institution to provide you with health care;
  2. To protect the health and safety of you and others;
  3. For the safety and security of the correctional institution.

HIGHLY CONFIDENTIAL INFORMATION:

• Federal and/or State law require special privacy protections for certain highly confidential information about you, including your health information that is maintained in psychotherapy notes and substance abuse disorder records. Similarly, Federal and/or State law, such as 42 U.S.C. 290dd-2 and its implementing regulations found at 42 CFR Part 2 (“Part 2”), may provide greater protections than HIPAA for the following types of information, in which case we will comply with the law that provides your information with the greatest protection and you with the greatest privacy rights: (1) mental health and developmental disabilities; (2) alcohol and drug abuse prevention, treatment and referral; (3) HIV/AIDS testing, diagnosis or treatment; (4) communicable diseases; (5) genetic testing; (6) child abuse and neglect; (7) domestic or elder abuse; (8) sexual assault; and/or (9) substance abuse disorder records (“SUD Records”). For your highly confidential information to be disclosed for a purpose other than those permitted or required by law, your written consent or authorization is required.
• SUD Records. Aspects of this notice that pertain to SUD Records protected under Part 2 are limited to the facility’s SUD treatment programs or SUD records it receives and does not apply to information related to care provided outside these programs such as substance abuse screening that is performed in emergency rooms or by your primary care provider.
• Using and Sharing SUD Records without Consent. The facility is allowed to share your SUD Records without your consent in the following situations: 1. To communicate among staff members within any Part 2 programs affiliated with the facility who have a need for the information in connection with their duties to provide diagnosis, treatment, or referral for treatment; 2. To medical personnel in a medical emergency; 3. To qualified service organizations providing services on our behalf who agree in writing to protect the information in the same way that we are required to protect the information; 4. To law enforcement if you commit, or threaten to commit, a crime in our facilities or against our personnel; 5. To report suspected child abuse and neglect as required by applicable law; 6. To qualified personnel for research subject to approval and oversight laws; 7. To qualified personnel for audit or program evaluation who a) agree in writing to protect the information as required under our policies, b) represent federal, state, or local government agencies that are authorized by law to oversee our program, or c) provide financial assistance to the program or provide payment for health care; 8. The disclosure is allowed by a court order and that order includes a subpoena or other legal mandate requiring that we share your information; or 9. To a public health authority, if the information has been de-identified.
• If we receive or maintain information subject to Part 2, unlike other protected health information, use or disclosure SUD Records for treatment, payment and/or healthcare operations require the patient’s written consent. You may provide a single consent for all future uses or disclosures for treatment, payment, and health care operations purposes.
• Recipients of SUD Records who are required to protect your information as required by HIPAA may share your information only as allowed by HIPAA except that they may not re-disclose information for civil, criminal, administrative, and legislative proceedings against you.
• Prohibition on Use and Disclosure of Part 2 Records. 1. If the records requested are SUD treatment records received from programs subject to Part 2, or testimony relaying the content of such records, this information shall not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless you provide written consent, or we receive a court order after notice and you or the holder of the record are provided an opportunity to be heard, as provided in Part 2. A court order authorizing use or disclosure must be accompanied by a subpoena or other legal requirement compelling disclosure before the requested record is used or disclosed. 2. A separate consent is required and must specifically address the use and disclosure of SUD counseling notes (if maintained). This consent cannot be combined with any other legal permission.
YOUR WRITTEN AUTHORIZATION: We will first obtain your written authorization before using or disclosing your medical information for any purpose not described above, including disclosures that constitute the sale of protected health information or for marketing communications paid for by a third party (excluding refill reminders, which the law permits without your authorization). If you provide the facility permission to use or disclose your medical information, you may revoke that permission, in writing to the Facility Privacy Officer, at any time. If you revoke your permission, we will no longer use or disclose your medical information for the reasons covered in your written authorization. You understand that we are unable to take back any disclosures already made with your permission, and that we are required to retain our records of the care that the facility provided to you. ADDITIONAL INFORMATION CONCERNING THIS NOTICE:
• Changes To This Notice. We reserve the right to change this notice and make the revised or changed notice effective for medical information we already have about you as well as any information we receive in the future. The facility will post a current copy of the notice with the effective date. In addition, each time you register at, or are admitted to, the facility for treatment or health care services as an inpatient or outpatient, we will offer you a copy of the current notice in effect.
• Complaints. You will not be retaliated against for filing a complaint. If you believe your privacy rights have been violated, you may file a complaint with the facility and/or with the Secretary of the Department of Health and Human Services. Some States may allow you to file a complaint with State’s Attorney General, Office of Consumer Affairs or other State agency as specified by applicable State law. To file a complaint with the facility, submit your complaint to the facility’s Privacy Officer in writing at the address at the end of this notice. The facility’s Privacy Officer can provide you with contact information for the Secretary of the Department of Health and Human Services as well as the State agency or agencies authorized to accept your complaints.
YOUR RIGHTS REGARDING YOUR MEDICAL INFORMATION: You have the following rights regarding medical information the facility maintains about you: ** NOTE: All Requests Must Be Submitted in Writing to the Facility Privacy Officer.
• Right to Request Access to Your Health Information. You have the right to inspect and copy medical information that may be used to make decisions about your care for as long as we maintain such information. Such access will be granted by the facility in accordance with applicable law.
To inspect and copy medical information or to receive an electronic copy of the medical information, you must submit a written request.  You may direct the facility to transmit the copy to another entity or person that you designate provided the choice is clear, conspicuous, and specific.  If you request a paper copy of your information, we may charge a fee for the cost of copying, mailing or other supplies associated with your request. If the facility uses or maintains an electronic health record with respect to your medical information, you have the right to obtain an electronic copy of the information if you so choose.  The facility may charge a fee equal to its labor cost in providing the electronic copy (e.g., costs may include the cost of a flash drive, if that is how you request a copy of your information be produced). If you request an electronic copy of your information, we will provide the information in the format requested if it is feasible to do so.  Please be aware that if you request us to share medical information by unencrypted e-mail, there is some risk that it could be read or accessed by a third party.  We will confirm that you want to receive medical information by unencrypted e-mail before sending it to you. We may deny your request to inspect and copy in some limited circumstances. If you are denied access to medical information, you may request that the denial be reviewed. Depending on the reason for the denial, another licensed health care professional, other than the person who denied your request, may be chosen by the facility to review your request and the denial. The facility will comply with the outcome of the review.
• Right to Amend. If you feel that medical information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment as long as the information is kept by or for the facility.
To request an amendment, you must submit a written request to the Facility Privacy Officer. You must also provide a reason that supports your request. Your request for an amendment may be denied if:
1. Your request is not in writing or does not include a reason to support the request;
2. The medical information was not created by us, unless the person or entity that created the information is no longer available to make the amendment;
3. The medical information is not part of the medical information kept by or for the facility;
4. The medical information is not part of the information you would be permitted to inspect and copy; or
5. The medical information is accurate and complete.
• Right to an Accounting of Disclosures. You have the right to request an “accounting of disclosures.” This is a list of certain disclosures we made outside of the facility of your medical information.
To request this list or accounting of disclosures:
1. You must submit your request in writing to the Facility Privacy Officer or Health Information Management (HIM) Department on the Written Request For Accounting of Disclosures Form.
2. Your request must state a time period, which may not be longer than six years and may not include dates before April 14, 2003.
3. Your request should indicate in what form you want the list (for example, on paper, electronically).
The first list you request within a 12-month period will be free. For additional lists, we may charge you for the costs of providing the list. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.
• Right to Request Restrictions. You have a right to request a restriction or limitation on the medical information we use or disclose about you for treatment, payment or health care operations, except for in the case of emergency. You also have the right to request a limit on the medical information we disclose about you to someone who is involved in your care or the payment for your care, like a family member. However, we are not legally required to agree to such a restriction and we reserve the right to deny such request for any reason, including that a restriction of your information may hinder your quality of care.  For any agreement to a restriction to be binding on the facility, it must be in writing and signed by the Facility Privacy Officer (FPO) and the Health Information Management (HIM) Director.
To request restrictions, you must make your request in writing to the FPO or HIM Director on the Written Request for Restrictions Form. In your request, you must tell us:
1. What information you want to limit;
2. Whether you want to limit our use, disclosure or both;
3. To whom you want the limits to apply, for example, disclosures to your spouse.
• Right to Request Confidential Communication. You have the right to request that we communicate with you about medical matters in a certain way or at a certain location.  To request confidential communications, you must make your request in writing to the Facility Privacy Officer. We will not ask you the reason for your request. We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.
  • For example: You can ask that we only contact you at your work or cell phone number or by mail to a specific address.
• Right to Be Notified of Breach. We will notify you if we or our business associate discovers a breach of your unsecured protected health information.
• Right to a Paper Copy of This Notice. You have the right to a paper copy of this notice. You may ask us to give you a copy at any time. Even if you have agreed to receive this notice electronically, you are still entitled to a paper copy of this notice.
Mimbres Valley Medical Center complies with applicable Federal civil rights laws and does not discriminate on the basis of race, color, national origin, age, disability, or sex. If you have any questions about this notice, please contact the Facility Privacy Officer at 575-546-5807.  Additionally, you can contact the FPO in writing at the following address: Mimbres Valley Medical Center Facility Privacy Officer Robert Montoya, MS, CPHQ 575-546-5807 900 West Ash Street
Deming, NM 88030 VER ESTA INFORMACIÓN EN ESPAÑOL DOWNLOAD A COPY OF THIS NOTICE OF PRIVACY PRACTICES