HIPAA Privacy Policy
Notice of Privacy Practices (HIPAA)
This Notice of Privacy Practices describes how your medical information may be used and disclosed and how you can access this information. We are required by law (Health Insurance Portability and Accountability Act of 1996, 45 CFR Parts 160 and 164) to protect the privacy of your health information.
Your Rights
You have the right to:
- Get a copy of your health and billing records.
- Request corrections to your medical record if you believe there are errors.
- Request confidential communication (e.g., contact only by phone or at work).
- Ask us to limit the information we share for treatment, payment, or operations.
- Obtain a list (“accounting”) of disclosures we have made about you.
- Receive a paper or electronic copy of this notice at any time.
- File a complaint if you believe your privacy rights have been violated.
Our Uses and Disclosures
We may use or share your health information in the following ways:
- Treatment: To provide, coordinate, or manage your healthcare.
- Payment: To bill and receive payment for services.
- Healthcare Operations: For quality improvement, staff training, compliance, and audits.
- Public Health and Safety: To report abuse, neglect, domestic violence, or prevent disease.
- Legal Requirements: As required by federal or state law, including law enforcement requests.
- Workers’ Compensation: To comply with workers’ compensation laws.
- Specialized Government Functions: For military, national security, or correctional institutions.
Your Choices
You have the right to decide how we share information in certain circumstances, including:
- Sharing information with family, friends, or caregivers involved in your care.
- Including your information in disaster relief efforts.
- Using your information for marketing purposes or fundraising (only with your written authorization).
Our Responsibilities
We are required by law to:
- Maintain the privacy and security of your protected health information (PHI).
- Inform you if a breach occurs that may have compromised your PHI.
- Provide you with a copy of this Notice of Privacy Practices.
- Follow the duties and privacy practices described in this notice.
- Not use or share your information other than as described here unless you authorize it in writing.
Changes to this Notice
We may change this notice at any time. Changes will apply to all medical information we maintain. The updated notice will be posted in our office and on our website.
Complaints
If you believe your privacy rights have been violated, you can file a complaint with:
- Twin Peaks Performance Privacy Officer
605 NE Savannah Drive, Bend, OR
- U.S. Department of Health & Human Services, Office for Civil Rights
200 Independence Avenue, S.W., Washington, D.C. 20201
You will not be penalized for filing a complaint.
Effective Date
This notice is effective as of January 1, 2025.
Contact
To request a copy of our full HIPAA Notice or exercise your rights, contact: 541-207-4512