HIPAA Notice

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Nouriche Wellness & Aesthetics (Dr. Kelly Cobb MD) is required by the Health Insurance Portability and Accountability Act of 1996, and the Health Information Technology for Economic and Clinical Health Act (found in Title XIII of the American Recovery and Reinvestment Act of 2009) (collectively referred to as “HIPAA”), as amended from time to time, to maintain the privacy of individually identifiable patient health information (this information is “protected health information” and is referred to herein as “PHI”). We are also required to provide patients with a Notice of Privacy Practices regarding PHI. We will only use or disclose your PHI as permitted or required by applicable state law. This Notice applies to your PHI in our possession including the medical records generated by us.

Nouriche Wellness & Aesthetics understands that your health information is highly personal, and we are committed to safeguarding your privacy. Please read this Notice of Privacy Practices thoroughly. It describes how we will use and disclose your PHI.

Treatment: Nouriche Wellness & Aesthetics will use and disclose your PHI to provide, coordinate, or manage your health care and related services to carry out treatment functions. The following are examples of how Dr. Kelly Cobb MD will use and/or disclose your PHI:

• To your attending physician, consulting physician(s), and other health care providers who have a legitimate need for such information in your care and continued treatment.
• To coordinate your treatment (e.g., appointment scheduling) with us and other health care providers such as name, address, employment, insurance carrier, etc.
• To contact you as a reminder that you have an appointment for treatment or medical care at our facilities.
• To provide you with information about treatment alternatives or other health-related benefits or services.
• If you are an inmate of a correctional institution or under the custody of a law enforcement officer, we will disclose your PHI to the correctional institution or law enforcement official.

Payment: Nouriche Wellness & Aesthetics will use and disclose PHI about you for payment purposes. The following are examples of how we will use and/or disclose your PHI:

To an insurance company, third party payer, third party administrator, health plan or other health care provider (or their duly authorized representatives) for payment purposes such as determining coverage, eligibility, pre-approval / authorization for treatment, billing, claims management, reimbursement audits, etc.

To collection agencies and other subcontractors engaged in obtaining payment for care.

Health Care Operations: We will use and disclose your PHI for health care operations purposes. The following are examples of how we will use and/or disclose your PHI:

• For case management, quality assurance, utilization, accounting, auditing, population based activities relating to improving health or reducing health care costs, education, accreditation, licensing and credentialing activities.
• To consultants, accountants, auditors, attorneys, transcription companies, information technology providers, etc.

Other Uses and Disclosures: As part of treatment, payment and health care operations, Nouriche Wellness & Aesthetics may also use your PHI for the following purposes:

• Fundraising Activities: Dr. Kelly Cobb MD will use and may also disclose some of your PHI for certain fundraising activities. For example, Dr. Kelly Cobb MD may disclose your demographic information, your treatment dates of service, treating physician information, department of service and outcomes information to fundraisers who may ask you for a monetary donation. Any fundraising communication sent to you will let you know how you can exercise your right to opt-out of receiving similar communications in the future.
• Medical Research and Teaching: Dr. Kelly Cobb MD will use and disclose your PHI without your authorization to medical researchers and clinical educators who request it for approved medical research or other academic/teaching projects. Researchers, educators and students are required to safeguard all PHI they receive.
• Information and Health Promotion Activities: Dr. Kelly Cobb MD will use and disclose some of your PHI for certain health promotion activities. For example, your name and address will be used to send you general newsletter or specific information based on your own health concerns.

More Stringent State and Federal Laws: The State law of Illinois is more stringent than HIPAA in several areas. Certain federal laws also are more stringent than HIPAA. Dr. Kelly Cobb MD will continue to abide by these more stringent state and federal laws.

More Stringent Federal Laws: The federal laws include applicable internet privacy laws, such as the Children’s Online Privacy Protection Act and the federal laws and regulations governing the confidentiality of health information regarding substance abuse treatment.

More Stringent State Laws: State law is more stringent when the individual is entitled to greater access to records than under HIPAA. State law also is more restrictive when the records are more protected from disclosure by state law than under HIPAA. Refer below for more stringent state law protections in Louisiana.

Sensitive information: Illinois law, with some exceptions, may require that we obtain your written permission, or in some instances, a court order to disclose sensitive information. Sensitive medical information includes that which may deal with genetic testing, HIV/AIDS, mental health, alcohol and substance abuse, and sexual assault.

Minors: Minors in Illinois have more rights to confidentiality and protection of certain information related to reproductive health, behavioral health and substance abuse under HIPAA.

Professional Licensure: Illinois law may require your written permission if certain medical information is to be used in various review and disciplinary proceedings of healthcare professionals by state authorities.

Health Information Exchange: Dr. Kelly Cobb MD shares your health records electronically or otherwise with state-designated Health Information Exchange] (“HIE”) that exchange health records with other HIEs. Dr. Kelly Cobb MD also uses data exchange technology (such as direct messaging services, HIPS, and provider portals) with its Electronic Health Record (“EHR”) to share your health records for continuity of care and treatment. HIEs and data exchange technology also enable the sharing of your health records to improve the quality of health care services provided to you (e.g., avoiding unnecessary duplicate testing). The shared health records will include, if applicable, sensitive diagnoses such as HIV/AIDS, sexually transmitted diseases, genetic information, and mental health substance abuse, etc. HIEs and data exchange technology function as our business associate and, in acting on our behalf, they will transmit, maintain and store your PHI for treatment, payment and health care operation purposes. HIEs and data exchange technologies are required to implement administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality and integrity of your medical information. State law may provide you rights to restrict, opt-in, or opt-out of HIE(s). For more information please contact Dr. Kelly Cobb MD.

Family/Friends: Dr. Kelly Cobb MD will disclose PHI about you to a friend or family member who is involved in or paying for your medical care. You have a right to request that your PHI not be shared with some or all of your family or friends. In addition, Dr. Kelly Cobb MD will disclose PHI about you to an agency assisting in disaster relief efforts so that your family can be notified about your condition, status, and location.

Marketing: Subject to certain limited exceptions, your written authorization is required in cases where Dr. Kelly Cobb MD receives any direct or indirect financial remuneration in exchange for making the communication to you which encourages you to purchase a product or service or for a disclosure to a third party who wants to market their products or services to you.

Research: Dr. Kelly Cobb MD will obtain your written authorization to use or disclose your PHI for research purposes when required by HIPAA.

Psychotherapy Notes: Most uses and disclosures of psychotherapy notes require your written authorization.

Sale of PHI: Subject to certain limited exceptions, disclosures that constitute a sale of PHI require your written authorization.

Other Uses and Disclosures: Any other uses or disclosures of PHI that are not described in this Notice of Privacy Practices require your written authorization. Written authorizations will let you know why we are using your PHI. You have the right to revoke an authorization at any time.

Law Enforcement Purposes: Dr. Kelly Cobb MD will disclose your PHI for law enforcement purposes as required by law, such as identifying a criminal suspect or a missing person, or providing information about a crime victim or criminal conduct.

Required by Law: Loyola Medicine will disclose PHI about you when required by federal, state or local law. Examples include disclosures in response to a court order / subpoena, mandatory state reporting (e.g., gunshot wounds, victims of child abuse or neglect), or information necessary to comply with other laws such as workers’ compensation or similar laws. Dr. Kelly Cobb MD will report drug diversion and information related to fraudulent prescription activity to law enforcement and regulatory agencies.

Public Health Oversight or Safety: Dr. Kelly Cobb MD will use and disclose PHI to avert a serious threat to the health and safety of a person or the public. Examples include disclosures of PHI to state investigators regarding quality of care or to public health agencies regarding immunizations, communicable diseases, etc. Dr. Kelly Cobb MD will use and disclose PHI for activities related to the quality, safety or effectiveness of FDA regulated products or activities, including collecting and reporting adverse events, tracking and facilitating in product recalls, etc.

Coroners, Medical Examiners, Funeral Directors: Dr. Kelly Cobb MD will disclose your PHI to a coroner or medical examiner. For example, this will be necessary to identify a deceased person or to determine a cause of death. Dr. Kelly Cobb MD may also disclose your medical information to funeral directors as necessary to carry out their duties.

Organ Procurement: Dr. Kelly Cobb MD will disclose PHI to an organ procurement organization or entity for organ, eye or tissue donation purposes.

Specialized Government Functions: Dr. Kelly Cobb MD will disclose your PHI regarding government functions such as military, national security and intelligence activities. Dr. Kelly Cobb MD will use or disclose PHI to the Department of Veterans Affairs to determine whether you are eligible for certain benefits.

Immunizations: Dr. Kelly Cobb MD will disclose proof of immunization to a school where the state or other similar law requires it prior to admitting a student.

You have the following individual rights concerning your PHI:

Right to Inspect and Copy: Subject to certain limited exceptions, you have the right to access your PHI and to inspect and copy your PHI as long as we maintain the data.

If Dr. Kelly Cobb MD denies your request for access to your PHI, Dr. Kelly Cobb MD will notify you in writing with the reason for the denial. For example, you do not have the right to psychotherapy notes or to inspect the information which is subject to law prohibiting access. You may have the right to have this decision reviewed.

You also have the right to request your PHI in electronic format in cases where Dr. Kelly Cobb MD utilizes electronic health records. You may also access information via patient portal if made available by Dr. Kelly Cobb MD.

You will be charged a reasonable copying fee in accordance with applicable federal or state law.

Right to Amend: You have the right to amend your PHI for as long as Dr. Kelly Cobb MD maintains the data. You must make your request for amendment of your PHI in writing to Dr. Kelly Cobb MD, including your reason to support the requested amendment.
However, Dr. Kelly Cobb MD will deny your request for amendment if:

• Dr. Kelly Cobb MD did not create the information;
• The information is not part of the designated record set;
• The information would not be available for your inspection (due to its condition or nature); or
• The information is accurate and complete.

If Dr. Kelly Cobb MD denies your request for changes in your PHI, Dr. Kelly Cobb MD will notify you in writing with the reason for the denial. Dr. Kelly Cobb MD will also inform you of your right to submit a written statement disagreeing with the denial. You may ask that Dr. Kelly Cobb MD include your request for amendment and the denial any time that Dr. Kelly Cobb MD subsequently discloses the information that you wanted changed. Dr. Kelly Cobb MD may prepare a rebuttal to your statement of disagreement and will provide you with a copy of that rebuttal.

Right to an Accounting: You have a right to receive an accounting of the disclosures of your PHI that Dr. Kelly Cobb MD has made, except for the following disclosures:

• To carry out treatment, payment or health care operations;
• To you;
• To persons involved in your care;
• For national security or intelligence purposes; or
• To correctional institutions or law enforcement officials.

You must make your request for an accounting of disclosures of your PHI in writing to Dr. Kelly Cobb MD.

You must include the time period of the accounting, which may not be longer than 6 years. In any given 12-month period, Dr. Kelly Cobb MD will provide you with an accounting of the disclosures of your PHI at no charge. Any additional requests for an accounting within that time period will be subject to a reasonable fee for preparing the accounting.

Right to Request Restrictions: You have the right to request restrictions on certain uses and disclosures of your PHI to carry out treatment, payment or health care operations functions or to prohibit such disclosure. However, Dr. Kelly Cobb MD will consider your request but is not required to agree to the requested restrictions.

Right to Request Restrictions to a Health Plan: You have the right to request a restriction on disclosure of your PHI to a health plan (for purposes of payment or health care operations) in cases where you paid out of pocket, in full, for the items received or services rendered.

Right to Confidential Communications: You have the right to receive confidential communications of your PHI by alternative means or at alternative locations. For example, you may request that Dr. Kelly Cobb MD only contact you at work or by mail.

Right to Receive a Copy of this Notice: You have the right to receive a paper copy of this Notice of Privacy Practices, upon request.

If a breach of unsecured PHI affecting you occurs, Dr. Kelly Cobb MD is required to notify you of the breach.

In the course of providing care to you and in furtherance of Dr. Kelly Cobb MD ’s mission to improve the health of the community, Dr. Kelly Cobb MD will share your PHI with other organizations as described below who have agreed to abide by the terms described below:

• Medical Staff. The medical staff and Loyola Medicine participate together in an organized health care arrangement to deliver health care to you. Both Dr. Kelly Cobb MD and medical staff have agreed to abide by the terms of this Notice with respect to PHI created or received as part of delivery of health care to you by Dr. Kelly Cobb MD. Physicians and allied health care professionals who are members of Dr. Kelly Cobb MD’s medical staff will have access to and use your PHI for treatment, payment and health care operations purposes related to your care within Dr. Kelly Cobb MD and will disclose your PHI to the medical staff and allied health professionals for treatment, payment and health care operations.
• Business Associates. Dr. Kelly Cobb MD will share your PHI with business associates and their Subcontractors contracted to perform business functions on Dr. Kelly Cobb MD behalf, including Dr. Kelly Cobb MD which performs certain business functions for Dr. Kelly Cobb MD.
• Your Health Care Providers and Care Coordinators. You receive care from Dr. Kelly Cobb MD delivered in an integrated care setting, where patients are seen by several different providers and in several care settings as part of continuity of care and coordinated care delivery. Dr. Kelly Cobb MD shares your PHI with other health care providers and care coordinators who work together to provide treatment, obtain payment and conduct health care
  operations. Your PHI is shared electronically in multiple ways with providers involved in the delivery of care and care coordination. Your PHI may be shared via a direct connection to the electronic health record system of other providers. Your PHI may be shared in a health information exchange or via technology that enables downstream providers and care coordinators to obtain your information. Your PHI may be shared via secure transmission to other providers’ inboxes.

Dr. Kelly Cobb MD will abide by the terms of the Notice currently in effect. Dr. Kelly Cobb MD reserves the right to make material changes to the terms of its Notice and to make the new Notice provisions effective for all PHI that it maintains. Dr. Kelly Cobb MD will distribute / provide you with a revised Notice at your first visit following the revision of the Notice in cases where it makes a material change in the Notice. You can also ask Dr. Kelly Cobb MD for a current copy of the Notice at any time.

If you believe your privacy rights have been violated, you may file a complaint with Dr. Kelly Cobb MD Privacy Official or with the Secretary of the Department of Health and Human Services. All complaints must be submitted in writing directly to Dr. Kelly Cobb MD Privacy Official. Dr. Kelly Cobb MD assures you that there will be no retaliation for filing a complaint. You will not be retaliated against for filing any complaint.