Privacy Policy - Prospective Residents and Fellows

NOTICE OF INFORMATION PRIVACY PRACTICES
OF
UNIVERSITY OF MARYLAND MEDICAL CENTER

UNIVERSITY OF MARYLAND REHABILITATION & ORTHAPAEDICS INSTITUTE
UNIVERSITYCARE, LLC

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE
USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS
INFORMATION.

PLEASE REVIEW IT CAREFULLY.
Effective: April 14, 2003

1. We have a legal duty to protect health information about you. We call this information "protected health information" or "PHI".
   
   
2. We may use and disclose PHI without asking you in the following ways:
   
   1. We may use and disclose PHI about you to treat you.
   2. We may use and disclose PHI to get paid for our services.
   3. We may use and disclose PHI for health care operations.
   4. We may contact you to remind you of an appointment.
   5. We may send you material about our services and providers
   6. We may contact you to raise money for the Facility.
   7. We may list you in the Patient Directory. We may also share information about you with your family or with other people who are involved in your care or payment for your care. We may share information for disaster relief purposes.
   8. We may use and disclose PHI about you under other circumstances without asking you.
3. You have certain rights regarding PHI about you.
   
   1. You have a right to a copy of this Notice.
   2. You have the right to see and copy PHI about you.
   3. You have the right to request different ways to communicate with you.
   4. You have the right to request amendment of PHI about you.
   5. You have the right to ask us to restrict uses and disclosures of PHI about you.
   6. You have the right to a listing of disclosures we have made.
4. You may file a complaint about our privacy practices.
   
   We work with the physicians at our facilities to provide your care. We may share PHI about you for treatment, payment, or health care operations with: University of Maryland School of Medicine (SOM), University Physicians, Inc. and its affiliated Faculty Practice Groups (UPI), and other physicians on our medical staff. We are a separate legal entity from SOM, UPI, and our other physicians. We maintain separate health and billing records. You must contact SOM, UPI or your physician directly to obtain any PHI that they may keep about you.

1. WE HAVE A LEGAL DUTY TO PROTECT HEALTH INFORMATION ABOUT YOU.
   
   We are committed to protecting the privacy of your PHI. Federal and State law require us to keep PHI about you private. These laws also require us to tell you how we protect PHI about you, and how, when, and why we use PHI about you. We may only use PHI as described in this Notice. There are other laws that provide additional protections for PHI related to treatment for mental health, alcohol and other substance abuse. We will follow the requirements of these laws for that kind of PHI. We may change this Notice. The new notice will apply to all PHI that we have. If we change the notice, we will post the revised notice at the Facility or on our web site [this does not apply to UniversityCare] and make copies of the revised notice available.
   
   
2. WE MAY USE AND DISCLOSE PHI ABOUT YOU WITHOUT ASKING YOU IN THE FOLLOWING WAYS.
   
   1. We may use and disclose PHI to treat you.
      EXAMPLE: You have diabetes. You break your leg. Your doctor needs to know that you have diabetes because diabetes may slow the healing of your leg. The dietitian needs to know that you have diabetes so that she gets you the right meals. When you are ready to leave the facility, we may disclose PHI to a home health provider who will care for you at home.
      
      
   2. We may use and disclose PHI to get paid for our services.
      We may give your insurer PHI when we ask it to pay for your care. We may disclose PHI to obtain payment from others responsible, such as family members, and to get help in being paid (collection agencies).
      EXAMPLE: You have high blood pressure. We give your insurer information about your condition and services you receive (such as laboratory tests or x-rays) so it will pay us.
      
      
   3. We may use and disclose PHI for health care operations.
      These "health care operations" help us improve the quality of care we provide, to reduce costs, and to educate students. Staff review PHI to educate caregivers and to plan services. Staff share PHI with accountants, lawyers and others who help us (business associate). We provide PHI to outside organizations such as The Joint Commission who judge the quality of care we provide.
      EXAMPLE: You had an unusual illness. Later, staff who took care of you may discuss your illness with other staff so they will learn about the illness and how to treat it.
      
      
   4. We may contact you to remind you of an appointment
      
      
   5. We may send you material about our services and providers
      We may use PHI to manage or coordinate your healthcare. This may include telling you about treatments, services, and other healthcare providers you might be interested in.
      EXAMPLE: If you are diagnosed with diabetes, we may tell you about nutritional and other counseling services that may be of interest to you.
      
      
   6. We may contact you to raise money for the Facility
      We may disclose PHI about you to a foundation that will ask you to give money to the Facility. We only release contact information and the dates you received treatment or services at the Facility. If you do not want to be contacted in this way, you must notify in writing the office listed in C. 1. below.
      
      
   7. We may list you include information about you in the Hospital Patient Directory. We may , share information it with your family or with other individuals involved in your care or payment for your care. , We may share information or for disaster relief purposes. Unless you ask us to, if you are a Psychiatry inpatient at UMMC, we will not include you in the Patient Directory.
      
      Unless you object:
      
      • We may share your name, room number, and condition with people who ask for you by name.
        
        
      • We may share with a family member, friend or other person you identify, PHI directly related to that person's involvement in your care or payment for that care. We may share with them PHI so they will know where you are, your general condition, or your death.
        
        
      • We may share with an agency (for example, American Red Cross) PHI about you when you are involved in a disaster. Even if you object, we may share the PHI about you in an emergency.
      
      
      If you would like to object to this use or disclosure of PHI about you [or if you are a UMMC inpatient in Psychiatry and want us to include you in the Hospital Patient Directory], please CONTACT: University of Maryland Medical Center (UMMC) or UniversityCare (UCare), Patient Representative at 410-328-8777; University of Maryland Rehabilitation & Orthopaedics Institute, Manager of Medical Records at 410-448-6888; University Specialty Hospital (USH), Patient Advocate at 410-547-8500 ext. 435.
      
      
   8. We may use and disclose your PHI about you under other circumstances without asking you.
      
      These circumstances include:
      AS REQUIRED BY LAW: federal, state, or local law.
      
      HEALTH OVERSIGHT ACTIVITIES including audits; civil, administrative or criminal investigations; licensure or disciplinary actions; and monitoring of compliance with laws.
      
      WORKERS COMPENSATION or similar programs, as required by the laws governing these programs.
      
      RESEARCH PURPOSES: if an Institutional Review Board has reviewed the request for the information and approved a waiver of authorization under standards set by law.
      
      PUBLIC HEALTH ACTIVITIES such as keeping birth or death records; controlling communicable disease; ensuring the safety of drugs and medical devices; tracking work related illness and injury; and reporting abuse, neglect or domestic violence to government authorities.
      
      ORGAN AND TISSUE PROCUREMENT: informing organ procurement, eye or tissue organizations to aid organ or tissue donation and transplantation.
      
      CORONERS, MEDICAL EXAMINERS, FUNERAL DIRECTORS to determine the cause of death and to permit them to carry out their duties.
      
      LAWSUITS AND DISPUTES as required by law or an order of a court or agency that is handling a dispute.
      
      LAW ENFORCEMENT: to appropriate persons to prevent a serious and imminent threat to the health or safety of a particular person, for national security and intelligence, to identify suspects, fugitives or witnesses, or victims of crime (with your consent in some circumstances), or to report crimes on the premises.
      
      MILTARY AND VETERANS as required by command authorities.
      
      INMATES: information for your health and the health and the safety of others.
      
      

   WE MUST ASK YOU FOR PERMISSION FOR ANY OTHER USE OR DISCLOSURE OF PHI ABOUT YOU.

   In any other circumstances, we will ask for your written authorization before we use or disclose PHI about you. Your authorization will be for a specific purpose. If you give us authorization, you can later change your mind and cancel your authorization but you must cancel your authorization in writing. Once we receive your cancellation, we will not disclose PHI about you, except for disclosures that we processed before we received your cancellation.

3. YOU HAVE THE RIGHT TO:
   
   1. A copy of this Notice.
      CONTACT: For UMMC and UCare, the Patient Representative at 410-328-8777; for University of Maryland Rehabilitation & Orthopaedics Institute, the Manager of Medical Records at 410-448-6888; for USH, the Patient Advocate at 410-547-8500 ext. 435; or download a copy from the web site.
      
      
   2. See and copy PHI about you.
      Your request must be in writing. We may charge you a fee to copy your record. In certain situations, we are not required to comply with your request, but we will tell you in writing why we will not grant your request and what you must do to request a review of our decision.
      
      
   3. Request different ways to communicate with you.
      After registration, your request must be in writing. We will honor reasonable requests. For example, you may request that we contact you at your work address or phone number or by email.
      
      
   4. Request amendment of PHI about you.
      Your request must be in writing and include why you think the PHI is wrong. We may deny your request, for example, if we think the PHI is accurate. Even if we accept your request, we may not delete any information already in your medical record. If we reject your request, we will tell you why; if you send us a written statement describing what you think is wrong, we will put that in the medical record.
      
      
   5. Ask us to restrict uses and disclosures of PHI about you.
      Your request must be in writing. We do not have to agree to your request. The law may not let us agree. If we do agree, we must comply with our agreement except when the information is needed to provide you with emergency treatment or to comply with the law.
      
      
   6. A listing of disclosures we have made.
      Your request must be in writing. The list will not include information about some disclosures, such as disclosures for treatment, payment or healthcare operations, or disclosures you authorized. If you request a list of disclosures more than once in 12 months, we can charge you a reasonable fee.
      
      

      For ##2 - 6 above and for general inquiries, please contact:

      For UMMC, Medical Records, 22 South Greene St., Baltimore, MD 21201;
      for information call 410-328-6915

      For University of Maryland Rehabilitation & Orthopaedics Institute, Manager of Medical Records, 2200 Kernan Drive, Baltimore, MD 21207;
      for information call 410-448-6888

      For USH Manager of Medical Records 601 S. Charles St., Baltimore, MD 21230;
      for information call 410-547-8500 ext. 284

      For UMMC Division of Community Psychiatry, Director, Division of Community Psychiatry, 701 W. Pratt St. 3rd floor, Baltimore, MD 21201;
      for information call 410-328-3414.

4. YOU MAY FILE A COMPLAINT ABOUT OUR PRIVACY PRACTICES.
   
   If you believe your privacy rights have been violated, you may file a complaint. This complaint must be in writing and addressed to: for UMMC, University of Maryland Rehabilitation & Orthopaedics Institute, and USH - Privacy Officer, UMMC, Executive Office, 22 S. Greene St., Baltimore, MD 21201; for UCare - Privacy Officer, Room 335E, 29 S. Greene St., Baltimore MD 21201. There will be no retaliation for filing a complaint. You also have the right to complain to the Secretary of the Department of Health and Human Services.