We may use and disclose your health information for:
Treatment: Information obtained by a nurse, physician, or other member of your health care team will be recorded in your record and used to determine the course of treatment. Members of your health care team will record the actions they took, their observations, and their assessments. In that way, your health care team will know how you are responding to treatment. We will also provide your physician or a subsequent health care provider with copies of various reports that should assist him or her in treating you once you are discharged from our facilities.
Health Care Operations: We may use and disclose PHI for activities that MU Health engages in to operate its business, such as quality assurance, case management, receiving and responding to patient comments and complaints, physician reviews, compliance programs, audits, business planning, conducting disease management, and other population health management programs and activities, which may include development and the management of health outcomes and the identification of opportunities to improve the health of individuals or groups of individuals. In addition, we will use information to study health care and health care delivery and implement quality improvement initiatives.
Payment: A bill will be sent to you and/or a third-party payer (insurance company). The information on the bill may include information that identifies you, as well as your diagnosis, procedures, and supplies used. We may provide copies of the applicable portions of your medical record to your insurance company in order to validate your claim.
Other uses and disclosures: We may use and disclose health information for the following purposes:
Appointment Reminders: To remind you that you have an appointment scheduled with us. Please note if you would like these reminders to be provided to you via text message and or your personal email, these are not secure forms of transmission. We will honor your request;, however, any change to the email address and or telephone number is the responsibility of the patient to notify MU Health. MU Health is not responsible for the transmission reaching the incorrect individual if you have not updated the information.
Treatment Alternatives: To inform you of:
- New/existing services, programs, upcoming events
- New/existing staff – doctors, leadership
- Health information
- Research updates
- Marketing research
As required by Law: When required to do so by applicable law.
To prevent a Serious Threat to Health or Safety: We can share health information about you to prevent a serious threat to your health and safety or the health and safety of others. For public health activities such as prevention or control of disease, reporting births and deaths, and reporting child abuse and neglect.
Individuals Involved in your Care: Unless you object, to friends, family members or others involved in your medical care or who may be helping pay for your care. Your health care provider may ask your permission or may use his or her professional judgment to determine the extent of that involvement. In all cases, your health care provider may discuss only the information that the person involved needs to know about your care or payment for your care.
Law Enforcement: We will share information about you when permitted to do so by applicable law.
Decedents: Health records for patients deceased 50 or more years ago are no longer considered Protected Health Information.
Genetic Information: Genetic information is considered Protected Health Information, which may be disclosed without authorization but cannot be used by health plans for underwriting purposes.
Military and Veterans: If you are a member of the armed forces, we may disclose information as required by military command authority.
Health Oversight Activities: To governmental agencies and boards as authorized by law such as licensing and compliance purposes.
Business Associates: We may disclose your PHI to contractors, agents and other associates who need this information to assist us in carrying our business operations. Our contracts with them require that they protect the privacy of your PHI in the same manner as we do.
Facility Directory: Unless you notify us that you wish to opt out, MU Health will release your name and location to the general visiting public while you are a patient in a MU Health facility. In addition, your religious affiliation will be made available to the visiting clergy. The directory includes information about your location and general condition.
Research: We may use and disclose your PHI for research purposes subject to the requirements of applicable law. We may disclose information to researchers when their research has been approved by the MU Health Institutional Review Board (“IRB”). The IRB reviews the research proposals and establishes protocols to ensure the privacy of your PHI. Authorizations for research may be combined in the research context subject to certain requirements, and authorizations for future research are also permitted.
Respond to Organ and Tissue Donation Requests: If you are an organ donor, we may release PHI to organizations that handle organ procurement or organ, eye, or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.
Work with a Medical Examiner or Funeral Director: We may disclose PHI to funeral directors or coroners consistent with applicable law to carry out their duties.
Address Workers’ Compensation: For workers’ compensation purposes or similar programs providing benefits for work related injury or illness.
Fundraising: MU Health entities and its affiliates may contact you as part of a fundraising effort. The information used for this purpose will not disclose any health condition but may include your name, address, phone number, email address, etc. When contacted, you may opt out of any future fundraising requests.
Respond to Lawsuits and Disputes: In response to a warrant, court order, or other lawful process your PHI will be released.
Breach Notification: An impermissible use, access or disclosure of PHI is presumed to be a breach unless it is demonstrated that there is a low probability that the PHI has been compromised based on a risk assessment. If MU Health determines a breach has occurred with your PHI, you will be notified via mail of the breach.
Disaster Relief: Unless you object, to disaster release organizations to coordinate your care or notify family and friends of your location or condition following a disaster.
Inmates or Other Individuals in Custody: If you are an inmate or in the custody of law enforcement, we may disclose to the correctional institution or law enforcement official as necessary to provide you with health care, to protect the health and safety of you and others, or for the safety and security of the correctional institution.
Sale of PHI: MU Health and its affiliates will not sell your PHI.
Public Health Activities: For public health activities such as preventing or control of disease, reporting births and deaths, and reporting child abuse and neglect.
National security and intelligence activities: Your PHI may be disclosed to authorized federal officials for intelligence and other national security activities as authorized by law.
Protective services for the president and others: Your PHI may be disclosed to federal officials to provide protection to the president and other authorized persons, or conduct special investigations.
Psychotherapy notes: With certain exceptions, we are not allowed to use or disclose psychotherapy notes without your authorization, including a disclosure to a health care provider other than the originator of the notes, for treatment purposes.
Marketing: We are not authorized to use or disclose your PHI for marketing purposes without your authorization.
When it comes to your health information, you have certain rights. Although your PHI is the physical property of MU Health, the information belongs to you. You have the right to:
Get a copy of this privacy notice: You can request a paper copy of this notice at any time.
Get an electronic or paper copy of your medical record: You can inspect and obtain a paper or electronic copy of your PHI usually within 30 days of your written request. If your PHI is not readily producible in the format you request, it will be provided either in our standard electronic format or as a paper document. We may charge you a reasonable cost-based fee for the labor associated with providing you with access. If we deny your request to review or obtain a copy of your PHI, you may have the right to have that denial reviewed by a licensed health care provider who was not directly involved in the denial of your request, and we will comply with the outcome of that review.
Ask us to correct your medical record: You can request an amendment (correction) to your PHI if you believe information is incorrect or incomplete. Your request to amend your PHI may be denied if it was not created by us; if it is not part of the information maintained by us; or if we determine that the information is correct. You may submit a written appeal if you disagree. Your request for amendment will be included as a part of your PHI.
Request confidential communications: You can request communications of your PHI by alternative means or at alternative locations. For example, you may request that we send correspondence to a post office box rather than your home address. You have the right to request that your PHI be given to you in a confidential manner. You have the right to request that we communicate with you in a certain way or at a certain location, such as by mail or at your workplace. Any such request must be made in writing to Health Information Services. We will accommodate reasonable requests.
Ask us to limit what we use or share: You can request a restriction on certain uses and disclosures of your information; however, MU Health is not required to agree to such a request if the facts do not warrant it. You can revoke your authorization to use or disclose PHI except to the extent that action has already been taken. If you pay for a service out-of-pocket in full, you can request that information not be shared for the purpose of payment or our operations with your health insurer. Please note when your medical record is released by MU Health, any pictures contained in the record will also be included.
Get a list of those with whom we’ve shared information: You can obtain a list (an accounting of disclosures) of the times we have shared your PHI without authorization for six years prior to the date you asked, who we shared it with, and why, subject to certain exceptions set out in federal regulations. The first list you request in a 12 month period is free. If you make more requests during that time, you may be charged our cost to produce the list. We will tell you about the cost before you are charged.