Original Date: April 4, 2003
Revised: March 12, 2007
Revised: July 16, 2010
This Notice describes the ways in which we may use and disclose medical information about you. It also describes how you can get access to this information. Please review it carefully.
We care about you and your healthcare information. Norman Regional Health System (NRHS) is committed to safeguarding your medical record and to seeing that such records are available only to properly authorized individuals.
Each time you visit a hospital, physician, or other health care provider, a record of your visit is made. Typically, this record contains your symptoms, examination and test results, diagnoses, treatment, and a plan for future care or treatment. This information, often referred to as your health or medical records, serves as a:
Understanding what is in your record and how your health information is used helps you to:
NRHS and its staff understand that medical information about you and your health is personal and are committed to protecting your medical information. This Notice applies to all of the records of your care generated by NRHS and hospital-based physician services, whether created by NRHS personnel or a hospital-based physician. However, your personal physician(s) may have different policies or notices regarding their use and disclosure of your medical information created in their office.
We are required by law to:
We reserve the right to change our practices and to make the new provisions effective for all protected health information we maintain. Should our information practices change, we will provide a revised Notice to you. We will not disclose your health information without your consent or authorization, except as described in this Notice. Different privacy practices may apply to your medical information that is created or kept by other people or entities.
The following categories describe the ways that we may use and disclose your medical information, including sensitive information such as mental health, communicable disease and drug and alcohol abuse information. Your specific written consent or authorization generally is not required in connection with the uses and disclosures specifically described below. If you are concerned about a possible use or disclosure of any part of your medical information, you may request a restriction. Your right to request a restriction is described in the section below regarding patient rights. Oklahoma law only permits disclosure of communicable disease information, (such as HIV, AIDS, Hepatitis, etc.) under the following circumstances: (i) with the patient’s written consent, (ii) if release is ordered by a court; (iii) if release is required by the State Department of Health to protect the public; (iv) if release is made to a person exposed to such diseases; (v) if release is required to health professionals, appropriate state agencies or a court to enforce Oklahoma law; (vi) if release is required for statistical purposes without patient identity, or (vii) if release is required to health care providers and related parties for diagnosis and treatment purposes.
Treatment. We will use your health information for treatment.
For example: We will use your medical information to provide you with medical services.
For example: (1) your medical information may be reviewed by doctors, nurses, technicians and other personnel involved in taking care of you. (2) Different departments of a NRHS facility also may share medical information about you in order to coordinate specific services, such as lab work, x-rays and prescriptions.
We also may disclose your medical information for the treatment activities of any other health care providers or health information exchanges. You have the right to request a restriction on certain uses and disclosures of your information as provided by law. Such requests to restrict your PHI from being sent to a health exchange must be made in writing.
For example: (1) We may send your medical record to a physician who needs it to consult in your care or provide follow-up care. (2) We may send your medical record to a nursing home to which you are transferred to facilitate coordination of care. (3) We may send your medical records to electronic health information exchanges for use by other providers in your medical diagnosis and treatment.
Payment. We will use your health information to obtain payment for the services we provide to you.
For example: A bill may be sent to you or a third-party, including Medicare, Medicaid and private insurance companies. The information on or accompanying the bill may include information that identifies you, as well as your diagnosis, procedures, and supplies used.
We also may disclose medical information about you to another health care entity or provider so that it may obtain payment for services provided.
Health care operations. NRHS’s operations. Common operation activities include, but are not limited to:
For example: (1) We may use your information to conduct internal audits to verify that billing is being conducted properly. (2) We may use your information to contact you to conduct a patient satisfaction survey or to provide appointment reminders.
Business Associates. We may disclose your medical information to other entities that provide services to or for NRHS that require the release of patient medical information. However, we will make these disclosures only if we have received satisfactory assurance that the other entity will properly safeguard your medical information.
For example: We may contract with another entity to provide billing services.
Directory. Unless you notify us that you object, we may use your name, location in the facility, a one-word description of your condition (which may include your death if you die in a NRHS facility), and religious affiliation for directory purposes. This information may be provided to members of the clergy and, except for religious affiliation, to the media and other people who ask for you by name. Your religious affiliation may be given to members of the clergy even if they don’t ask for you by name.
Notification. We may use or disclose information to notify or assist in notifying a family member, personal representative, or other person responsible for your care, of your location and general condition, which may include your death if you die in a NRHS facility.
Communication with family. Health professionals, using their best judgment, may disclose to a family member, other relative, close personal friend or any other person you identify, health information relevant to that person’s involvement in your care or payment related to your care.
Research. We may disclose information to researchers. In many circumstances, your information may only be released with your written authorization. However, your information may be disclosed without your authorization when the research has been approved by a special committee that has reviewed the research proposal and established safeguards to ensure the privacy of your health information, and under certain other limited circumstances. Medical information about people who have died can be released without authorization under certain circumstances.
Coroners, Medical Examiners, and Funeral Directors. We may release medical record information to a coroner or medical examiner, to help identify a person or determine the cause of death. We also may release medical information about patients to funeral directors as necessary to carry out their duties.
Organ procurement organizations. Consistent with applicable law, we may disclose health information to organ procurement organizations or other entities engaged in the procurement, banking, or transplantation of organs for the purpose of tissue donation and transplant.
Treatment Alternatives. We may contact you to provide information about treatment alternatives or other health-related benefits and services that may be of interest to you.
Fundraising. We may contact you as part of a fundraising effort for NRHS. If you do not want to be contacted for fundraising efforts by NRHS or a related foundation, you may opt out of fundraising efforts by notifying, in writing, the Norman Regional Health Foundation, P.O. Box 1308, Norman, Oklahoma 73070-1308.
Food and Drug Administration (FDA). We may disclose to the FDA health information relative to adverse events with respect to food, supplements, product and product defects, or post marketing surveillance information to enable product recalls, repairs, or replacement.
Workers Compensation. We may disclose health information in order to comply with laws relating to workers compensation or other similar programs established by law.
Public Health. As required by law, we may disclose your health information to public health or legal authorities charged with preventing or controlling disease, injury, or disability.
For example: We are required to report, among other things, (1) cases of possible abuse or neglect, (2) certain infectious diseases; and (3) births, deaths and other statistical information.
Inmates. If you are an inmate of a correctional institution or under the custody of a law enforcement official or agency, we may disclose to the institution, official or agent health information necessary for your health and the health and safety of other individuals.
Law Enforcement. We may disclose health information for law enforcement purposes as required by law or in response to a court order.
In particular, we may release medical information to law enforcement officials (i) to help identify or locate a suspect, fugitive, material witness or missing person; (ii) about the victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement; (iii) about a death we believe may be the result of criminal conduct; (iv) about criminal conduct in a NRHS facility; and (v) in certain emergency circumstances to report a crime, the location of the crime or victims, or the identity, description or location of the person who committed the crime.
Health Oversight Activities. Federal law makes provision for your health information to be released to an appropriate health oversight agency, public health authority or attorney, provided that a work force member or business associate believes in good faith that we have engaged in unlawful conduct or have otherwise violated professional or clinical standards and are potentially endangering one or more patients, workers or the public.
Public Safety. We may use and disclose medical information about you when necessary to prevent serious threat to your health and safety or the health and safety of another person. Any disclosure would only be to someone able to help prevent the threat.
Lawsuits and Disputes. If you are involved in a lawsuit or a dispute, we may disclose medical information about you in response to a court or administrative order. In limited circumstances, we may disclose medical information about you in response to a subpoena or discovery request, but only if efforts have been made to inform you about the request or to obtain an order protecting the information requested.
National Security, Protective Services and Intelligence Activities. We may release medical information about you to authorized federal officials for (i) intelligence, counterintelligence and other national security activities authorized by law and (ii) for protection of the President and other authorized persons.
Military/Veterans. We may disclose your medical information as required by military command authorities, if you are a member of the armed forces.
Before NRHS can use or disclose your medical information for any purpose other than those described in this Notice, we must obtain a separate, written authorization from you. If you provide us with an authorization to use or disclose your medical information, you may revoke the authorization, in writing, at any time. If you revoke your authorization we will not use or disclose your medical information for the reasons covered in your authorization. However, your revocation will not apply to disclosures already made by us in reliance on your authorization.
Although your health record is the physical property of the health care practitioner or facility that compiled it, the information belongs to you. You have the right to:
If you have questions and would like additional information, you may contact NRHS’s Privacy Officer at 405-307-1405.
If you believe that your privacy rights have been violated, you may file a complaint with us. A complaint must be filed in writing and you may send it to the Privacy Officer or Administration. You may also file a complaint with the Secretary of the Department of Health and Human Services. There will be no retaliation for filing a complaint.