38
 

Brand Name Contacts Notice of Privacy Practices

Effective Date: April 14, 2003

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), Brand Name Contacts must take steps to protect the privacy of your "protected health information" (PHI). PHI includes information that we have created or received regarding your health or payment for your health. It includes both your medical records and personal information such as your name, social security number, address, and other identifying information. Brand Name Contacts is required to maintain the privacy of your PHI, to follow the terms of this Notice, and to provide you with access to this Notice of our legal duties and privacy practices with respect to your PHI. Additional copies of this Notice may be obtained online at http://www.brandnamecontacts.com/npp.asp. To request a paper copy of this Notice, call 1-877-251-LENS.

How Brand Name Contacts May Use or Disclose Your PHI

We protect the privacy of your health information. For some activities, we must have your written authorization to use or disclose your PHI. However, the law permits Brand Name Contacts to use or disclose your health information for the following purposes without your authorization:
  • For Treatment: We may use your PHI to treat you. For example, if you are being treated for an injury, we may share your PHI with your primary physician so they can provide proper care. We may also use it to send you information about products or services that may be of interest to you.
  • For Payment: We may use and disclose your PHI to collect payment for products and services. For example, we may contact your third party payor (i.e. insurer) to determine whether your program will pay for your prescription. We will bill you and/or a third party payor for the cost of the prescription dispensed to you. The information on or accompanying the bill may include your identification, as well as the prescriptions you are taking.
  • For Health Care Operations: We will use and disclose PHI to carry out health care operations. For example, we may use information in your health record to monitor the quality of our performance, to train personnel, or to ship prescriptions to you.
  • As Required by Law: We will disclose your PHI when required to do so by local, state or federal law, including workers'compensation laws.
  • Public Health and Safety Risks: We may use and disclose your PHI to an authorized public health authority or individual to (1) protect public health and safety; (2) prevent or control disease, injury, or disability; (3) report vital statistics such as births or deaths; (4) investigate or track problems with prescription drugs, foods, supplements and other health products; (5) post marketing surveillance to enable product recalls, repairs or replacements; and (6) to government entities authorized to receive reports regarding abuse, neglect, or domestic violence.
  • Oversight Agencies: We may use and disclose your PHI to health oversight agencies for certain activities such as audits, investigations, inspections, and licensures.
  • Legal Proceedings: We may disclose your PHI in the course of any legal proceeding in response to an order of a court or administrative agency and, in certain cases, in response to a subpoena, discovery request, or other lawful process.
  • Law Enforcement: To law enforcement officials in limited circumstances for law enforcement purposes. For example, disclosures may be made to identify or locate a suspect, witness, or missing person; to report a crime; or to provide information concerning victims of crimes.
  • Military Activity and National Security: To the military as required by military command authorities when the patient is a member of the armed forces; to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law; and to authorized federal officials so they may provide protection to the president, other authorized persons, or foreign heads of state or conduct special investigations.

When Brand Name Contacts May Not Use or Disclose Your PHI

Except as described in this Notice or as permitted by law, we will obtain your written authorization before using or disclosing PHI about you. You may revoke an authorization in writing at any time. Upon receipt of the written revocation, we will stop using or disclosing your PHI, except to the extent that we have already taken action in reliance on the authorization.

You Have the Following Rights With Respect to Your Health Information

  • You have the right to request that we restrict how your PHI is used or disclosed in carrying out treatment, payment, or health care operations. We are not required to agree to the requested restrictions, but will accommodate reasonable requests. If we do agree to the requested restrictions, that agreement will be binding on us.
  • You have the right to inspect and copy your PHI for as long as we maintain the health information. We may charge a reasonable fee for the costs of copying, mailing, or other supplies that are necessary to grant your request. In certain situations we may deny your request and will tell you why we are denying it. In some cases you may have the right to ask for a review of our denial.
  • If you feel that the PHI we maintain about you is incomplete or incorrect, you may request that we amend it. You may request an amendment for as long as we maintain the PHI. You must include a reason that supports your request. In certain cases, we may deny the request. If the request for amendment is denied, you have the right to file a statement of disagreement with the decision, and we may give a rebuttal to your statement. We will include a copy of both statements in your file.
  • You have the right to receive an accounting of disclosures of your PHI that we have made after April 14, 2003 for purposes other than (1) for Brand Name Contacts's treatment, payment, or health care operations, (2) to you or based upon your authorization and (3) for certain government functions. The right to receive an accounting is subject to certain other exceptions, restrictions, and limitations. The time period for the requested accounting must be specified and it may not be longer than six years. The first accounting you request within a 12-month period will be provided free of charge, but you may be charged for the cost of additional accountings within that period. We will notify you of the cost involved and you may choose to withdraw or modify the request at that time.
  • You have the right to request that our communications to you concerning your PHI be made by alternative means or to alternative locations. For example, you may wish us to communicate in some way other than calling your home telephone number. We will comply with a reasonable request for such an alternative.
If you would like to exercise one or more of these rights, you must send a written request to: Privacy Office, 4265 Diplomacy Dr, Columbus, OH 43228.

Changes to this Notice of Privacy Practices

Brand Name Contacts reserves the right to change this Notice at any time. We reserve the right to apply the revised Notice to all PHI we already maintain, as well as any information we receive in the future. If we change any of the practices described in this Notice, we will post the revised Notice at http://www.brandnamecontacts.com/.

For More Information or to Report a Problem

This Notice describes how we will treat your personal health information pursuant to the requirements of the Federal HIPAA privacy rules. State privacy laws may impose certain additional requirements. For a more complete description of state privacy issues, please go to the Notice posted athttp://www.brandnamecontacts.com/npp.asp If you have questions or would like additional information about our privacy practices, you may contact the Privacy Office by emailing customersservice@brandnamecontacts.com, by phone at (614) 921-1131 or by writing to: Privacy Office, Brand Name Contacts, 4265 Diplomacy Dr, Columbus, OH 43228 If you believe your privacy rights have been violated, you can file a complaint with Brand Name Contacts's Privacy Office or with the Secretary of Health and Human Services. There will be no retaliation for filing a complaint and Brand Name Contacts will maintain information in a manner consistent with company policies.