How Miami Valley Recovery protects your health information, and your rights under federal law.
Miami Valley Recovery LLC is committed to providing you with quality behavioral healthcare services. An important part of that commitment is protecting your health information according to applicable law. This notice (“Notice of Privacy Practices”) describes your rights and our duties under federal law. Protected health information (“PHI”) is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health or condition; the provision of healthcare services; or the past, present, or future payment for the provision of healthcare services to you.
We are required by law to maintain the privacy of your PHI, provide you with notice of our legal duties and privacy practices with respect to your PHI, and to notify you following a breach of unsecured PHI related to you. We are required to abide by the terms of this Notice of Privacy Practices. This Notice of Privacy Practices is effective as of the date listed above and will remain in effect until it is revised. We are required to modify this Notice of Privacy Practices when there are material changes to your rights, our duties, or other practices contained herein.
We reserve the right to change our privacy policy and practices and the terms of this Notice of Privacy Practices, consistent with applicable law and our current business processes, at any time. Any new Notice of Privacy Practices will be effective for all PHI that we maintain at that time. Notification of revisions of this Notice of Privacy Practices will be provided, upon request, electronically via our website or via other electronic means, or as posted in our place of business.
In addition to the above, we have a duty to respond to your requests (e.g., those corresponding to your rights) in a timely and appropriate manner. We support and value your right to privacy and are committed to maintaining reasonable and appropriate safeguards for your PHI.
The confidentiality of substance use disorder patient records maintained by us is also protected by federal law and regulations. Generally, the law and regulations provide that:
See 42 U.S.C. § 290dd‑3 and 42 U.S.C. § 290ee‑3 for federal laws and 42 CFR Part 2 for federal regulations.
Violation of the federal law and regulations by the treatment center is a crime. Suspected violations may be reported to the United States Attorney for the judicial district in which the violation occurs, as well as to the Substance Abuse and Mental Health Services Administration (SAMHSA) office responsible for oversight of the treatment center.
Uses and disclosures of your PHI may be permitted, required, or authorized. The following categories describe various ways that we use and disclose PHI.
We may use or disclose information between or among personnel having a need for the information in connection with their duties that arise out of the provision of diagnosis, treatment, or referral for treatment of alcohol or drug abuse, provided such communication is (i) within the treatment center; or (ii) between the treatment center and Miami Valley Recovery LLC. For example, our staff, including doctors, nurses, and clinicians, will use your PHI to provide your treatment care. Your PHI may be used in connection with billing statements we send you and in connection with tracking charges and credits to your account. Your PHI will be used to check for eligibility for insurance coverage and prepare claims for your insurance company where appropriate. We may use and disclose your PHI to conduct our healthcare business and to perform functions associated with our business activities, including accreditation and licensing.
We are required to disclose PHI to the Secretary of the U.S. Department of Health and Human Services when the Secretary is investigating or determining our compliance with the HIPAA Privacy Rules.
We may disclose your PHI to Business Associates that are contracted by us to perform services on our behalf which may involve receipt, use, or disclosure of your PHI. All of our Business Associates must agree to: (i) protect the privacy of your PHI; (ii) use and disclose the information only for the purposes for which the Business Associate was engaged; (iii) be bound by 42 CFR Part 2; and (iv) if necessary, resist in judicial proceedings any efforts to obtain access to patient records except as permitted by law.
We may disclose to law enforcement officers information that is directly related to the commission of a crime on the premises or against our personnel, or to a threat to commit such a crime.
We may disclose information required to report under state law incidents of suspected child abuse and neglect to the appropriate state or local authorities. However, we may not disclose the original patient records, including for civil or criminal proceedings which may arise out of the report of suspected child abuse and neglect, without consent.
We may disclose information required by a court order, provided certain regulatory requirements are met.
We may disclose information to medical personnel for the purpose of treating you in an emergency.
We may disclose your information to persons conducting certain audit and evaluation activities, provided the person agrees to certain restrictions on disclosure of information.
We may disclose your information related to cause of death to a public health authority that is authorized to receive such information.
Other than as stated above, we will not use or disclose your PHI other than with your written authorization. Subject to compliance with limited exceptions, we will not use or disclose psychotherapy notes, use or disclose your PHI for marketing purposes, or sell your PHI unless you have signed an authorization. If you or your representative authorizes us to use or disclose your PHI, you may revoke that authorization in writing at any time to stop future uses or disclosures. We will honor oral revocations upon authenticating your identity until a written revocation is obtained. Your revocation will not affect any use or disclosures permitted by your authorization while it was in effect.
The following are the rights that you have regarding PHI that we maintain about you. Protecting your PHI is an important part of the services we provide you. We want to ensure that you have access to your PHI when you need it and that you clearly understand your rights as described below.
You have the right to adequate notice of the uses and disclosures of your PHI, and our duties and responsibilities regarding same, as provided for herein. You have the right to request both a paper and electronic copy of this notice at any time. You may obtain this notice on our website at www.miamivalleyrecovery.com or from facility staff or our Client Rights Officer.
You have the right to access, inspect, and obtain a copy of your PHI for as long as we maintain it, as required by law. This right may be restricted only in certain limited circumstances as dictated by applicable law. All requests for access to your PHI must be made in writing. Under a limited set of circumstances, we may deny your request; any denial will be communicated to you in writing, and you may request that the denial be reviewed by another licensed healthcare professional chosen by Miami Valley Recovery LLC who was not involved in the original denial. We will comply with the decision made by the designated professional. If you are further denied, you have a right to have the denial reviewed by a licensed third-party healthcare professional not affiliated with us, and we will comply with that decision.
We may charge a reasonable, cost-based fee for copying and/or mailing your request. For PHI maintained in electronic form and format, you may request a copy in that electronic form and format if it is readily producible, or in another readable form and format as we may agree (e.g., PDF). Your request may also include transmittal directions to another individual or entity.
If you believe the PHI we have about you is incorrect or incomplete, you have the right to request that we amend your PHI for as long as it is maintained by us. The request must be made in writing and must include a reason supporting the requested amendment. We may deny your request under certain circumstances, including if the PHI (1) was not created by us; (2) is excluded from access and inspection under applicable law; or (3) is accurate and complete. If we deny an amendment, we will provide our rationale in writing, and you may write a statement of disagreement, which will be maintained as part of your PHI and included with any future disclosure. If we accept the amendment, we will work with you to identify other healthcare stakeholders that require notification and provide it.
We are required to create and maintain an accounting (list) of certain disclosures we make of your PHI. You have the right to request a copy of such an accounting for a period specified by applicable law prior to the date of the request (up to six years). This request must be made in writing. We are not required to record certain types of disclosures (such as those made pursuant to your signed authorization), and a listing of these will not be provided. If you request an accounting more than once in a 12-month period, we may charge a reasonable, cost-based fee, and we will notify you of any fee at the time of the request.
You have the right to request restrictions or limitations on how we use and disclose your PHI for treatment, payment, and operations. We are not required to agree to such restrictions except in limited circumstances described below. This request must be in writing. If we agree, we will comply going forward unless you revoke it, unless we believe an emergency warrants circumventing the restriction to provide appropriate care, or unless the use or disclosure is otherwise permitted by law. In rare circumstances, we reserve the right to terminate a restriction we previously agreed to, after providing you notice of termination.
If you have paid out-of-pocket in full for a specific item or service, you have the right to request that your PHI with respect to that item or service not be disclosed to a health plan for purposes of payment or healthcare operations, and we are required by law to honor that request unless affirmatively terminated by you in writing and when the disclosure is not otherwise required by law. This request must be made in writing.
You have the right to request that we communicate with you about your PHI and health matters by alternative means or at alternative locations. Your request must be made in writing and must specify the alternative means or location. We will accommodate all reasonable requests consistent with our duty to ensure your PHI is appropriately protected.
You have the right to be notified if we (or one of our Business Associates) discover a breach involving your unsecured PHI.
You have the right to file a complaint in writing with us or with the U.S. Department of Health and Human Services if you believe we have violated your privacy rights. We will not retaliate against you for filing a complaint.
For questions, requests for information, more information about our privacy policy, or concerns, please contact our Client Rights Officer:
Miami Valley Recovery LLC
Attn: Client Rights Officer
1 Elizabeth Place, Suite NWB40
Dayton, OH 45417
You will not be retaliated against in any way if you choose to file a complaint with us or with the U.S. Department of Health and Human Services.
If you believe your rights have been violated and would like to submit a complaint directly to the U.S. Department of Health & Human Services, you may submit a formal written complaint to:
U.S. Department of Health & Human Services
Office for Civil Rights
200 Independence Avenue, S.W., Washington, D.C. 20201
877.696.6775
Have a question about your privacy or records? Call us at 937.401.8672 or contact us, and we’ll direct you to our Client Rights Officer.