InXite Health Systems Notice of Privacy
‘InXite Health Systems Notice of Privacy Practices ("Notice") Effective
Date: November 27, 2018
This Notice describes how medical information about you which is Protected
Health Information (PHI) may be used and disclosed and how you can get
access to your PHI. Review it carefully.
We are required by law to maintain the privacy of PHI, to provide individuals
with notice of the legal duties and privacy practices of InXite Health Systems,
Inc. (“InXite”) with respect to PHI and to notify affected individuals following a
breach of unsecured PHI.
If you have any questions about this Notice, you may ask a member of the
staff where you receive health care services. You may also contact our
Privacy Office at 614–408-1680.
You may obtain our most current Notice by calling or writing to our privacy
officer to request that a copy be sent to you in the mail or by asking for it when
you come in for an appointment. The address for our privacy officer is
provided at the end of this Notice.
Uses and disclosures we are permitted or required to
make. The following is a description of the types of uses and disclosures of your PHI
that we are permitted or required to make. Not every use or disclosure
possible is listed, but all of the ways that we are permitted to use and disclose
your PHI will fall within one of these general categories.
We will use and disclose your PHI to provide you care management and
coordination practices related healthcare services. This includes disclosure of
your PHI to doctors, specialists, pharmacies and other third parties who are
involved in your care. For example, we will disclose your PHI to another
physician to whom you have been referred, to the physician who referred you
to us or to a home health agency that will be caring for you. We will use your
PHI during continuum of care coordination which may include, without
limitation, physicians, nurses, care managers, social workers, pharmacists,
physical therapists, spiritual care workers, nutrition staff, etc. who are involved
in your care.
We will use and disclose your PHI so that we may bill for health care services
and so that payment may be collected for the health care services you
receive. This includes activities such as communicating your PHI to an
Health care operations
We will use and disclose your PHI as necessary for health care operations.
For instance, we may use your information to evaluate the performance of
healthcare professionals for clinical quality measure purposes.
Additional rights under Federal and State laws
Federal and State laws may further limit our uses and disclosures in the case
of your PHI. This includes HIV-related records, records of alcohol or
substance abuse treatment and mental health records. If Federal and/or State
law applies to your PHI, we will use and disclose your PHI in compliance with
these more restrictive laws.
We may call you on the telephone, send you an email, or SMS/text you to
remind you of an upcoming appointment. We may leave you a voice message
that includes the date, time and general information about an upcoming
appointment on your telephone answering device. We may also send you an
appointment reminder in the mail.
Treatment alternatives/other health-related benefits and services
We may use or disclose your PHI to contact you to provide you with
information about treatment alternatives or other health-related benefits and
services that may be of interest to you.
Individuals involved in your care
We may disclose your PHI to those people who are involved in your care,
such as family members and friends.
As required by law or legal process
We will disclose your PHI when we are required to do so by local, state or
federal law or process of law.
To avert a serious threat to health or safety
We may use or disclose your PHI for reasons which include preventing a
serious threat to your health and safety, or the health and safety of others.
Cadaveric organ, eye and tissue donation
We may disclose the PHI of organ donors to organizations that assist with
Specialized government functions
We may use or disclose your PHI for specialized government functions such
as military, national security and presidential protective services.
We may disclose your PHI for purposes of handling your workers'
compensation claims in compliance with applicable laws, rules and
Public health activities
We may disclose your PHI to public health entities as authorized by law. Such
disclosures include (but are not limited to) reports of births and deaths, child
or elder abuse and neglect, and domestic violence.
Health oversight activities
We may disclose your PHI to agencies of the government for activities
authorized by law. These activities include monitoring health care systems
and participation in government programs.
Lawsuits and disputes
If you are involved in a lawsuit or other dispute, we may disclose your PHI in
response to documents such as a court order or when certain other
requirements are met.
We may disclose your PHI if asked to do so by a law enforcement official for
reasons including (but not limited to) identifying or locating a suspect, a
witness or a missing person, or investigating criminal activity.
Coroners, medical examiners and funeral directors
We may disclose certain PHI to a coroner or medical examiner. We may also
disclose certain PHI about deceased patients to funeral directors so that they
may carry out their duties.
If you are an inmate of a correctional institution or under the custody of a law
enforcement official, we may disclose your PHI to the respective correctional
institution or law enforcement official in accord with applicable laws, rules,
regulations and our policies.
Some of the services we provide are performed through contractual
relationships with outside parties or business associates. These services may
include (but are not limited to) financial, auditing and legal. We ask our
business associates to sign an agreement that restricts the ability of the
business associate to use or disclosure your PHI in an effort to make sure that
all PHI is appropriately safeguarded.
We may use or disclose your PHI for certain research purposes when such
research is approved by an institutional research review board, as
Receiving payment for PHI
Unless allowed by law, we may not receive payment directly or indirectly for
your PHI without your authorization.
You have rights regarding your PHI
Your right to inspect and copy
You have the right to inspect and receive a copy (paper or electronic) of your
PHI that may be used to make decisions about your care. You may also direct
us in writing to transmit your PHI to another entity or individual.
To do so, you must complete a Patient Access Request Form. You may
obtain a copy of the form by contacting our Privacy Office directly using the
contact information at the end of this Notice. If you need assistance
completing the form, please contact the Privacy Office at 614–408-1680 or via
email at email@example.com.
Note that you may be charged a reasonable cost-based fee. Note also that we
may deny your request to inspect and receive a copy of your PHI in very
limited circumstances. If you are so denied, in some cases, you may request
that such denial be reviewed. We will comply with the outcome of such review.
You may also wish to grant another individual or entity the right to access or
obtain your PHI. To do so, you must complete an authorization form that
complies with the law.
If you provide us with a written authorization to disclose your PHI, you may
revoke (cancel) it at any time. Your revocation (cancellation) must be in
writing. Contact our Privacy Office at 614–408-1680 for more information. We
are not able to take back any uses or disclosures that we already made with
Without your authorization, we will not disclose your PHI for marketing
purposes as set forth under the HIPAA rules. If we have psychotherapy notes
(as defined by the HIPAA Rules), we will not disclose them unless you sign an
You may also want to grant another individual or entity rights to access your
PHI. If you wish to do so, you can contact the Privacy Office at 614–408-1680
or at firstname.lastname@example.org and request the appropriate authorization form for
Your right to amend
We are required to retain your PHI regarding the care and treatment that is
provided to you in accordance with applicable law. You have the right to have
us amend PHI or a record about you in a designated record set for so long as
your PHI is maintained in the designated record set. However, we may deny
such a request if we determine that the PHI or record that is the subject of the
request: (i) was not created by us, unless you provide us with a reasonable
basis to believe that the originator of PHI is no longer available to act on the
requested amendment; (ii) is not part of the designated record set; (iii) would
not be available for inspection under 45 CFR 164.524; or (iv) is accurate and
complete. Generally, we must respond in writing to your request within sixty
(60) days. However, we may extend the time for such action by no more than
thirty (30) days as provided under HIPAA. If we do not agree to your request,
you have the right to submit a statement of disagreement that we must add to
your medical record. Contact our privacy officer at 614–408-1680 to request
Your right to an accounting of disclosures
You have the right to an accounting of disclosures. This is a list (accounting)
of the times we've disclosed your health information for six years prior to the
date you ask, who we've shared it with and why. In compliance with the law,
we will include all the disclosures except for those about treatment, payment,
and health care operations, and certain other disclosures (such as any you
have asked us to make). We will provide you with an accounting of
disclosures if you request it and in accord with the law. Contact our privacy
officer at 614–408-1680 to make such a request.
Your right to notification
We are required by law to maintain the privacy and security of your PHI. We
will let you know promptly if a breach occurs that may have compromised the
privacy or security of your information. This will be done by mail or by other
means if necessary.
Your right to request restrictions
You have the right to request restrictions on the PHI we use or disclose about
you for treatment, payment and health care operations. We are not required to
agree to your request, and generally, we will not accept requests for such
As required by law, if you have paid out of pocket for a health care service or
item, you have the right to ask us to not tell your insurance company about
such service or item for purposes other than treatment. We will not share the
PHI regarding such care with your insurer for purposes of payment or health
Your right to request confidential communications
You have the right to make a reasonable request that we communicate with
you regarding your PHI in a certain way or at a certain location (for example,
home or office phone). Such reasonable requests may include, when
appropriate, how information as to payment for services we provide to you will
be handled. We may require you to make this request in writing to the
manager of your care site.
Your right to a paper copy of this Notice
Generally, you have a right to obtain a paper copy of this Notice. You may ask
us to give you a copy of this Notice at any time, even if you have agreed to
receive this Notice electronically. You may also obtain a paper copy of this
Notice at the registration desk at your next appointment.
Changes to this Notice
We may change this Notice at any time. We may make the revised or
changed Notice effective for PHI we already have as well as any PHI we
receive in the future. We will post a current copy of this Notice on our
company website www.inxitehealth.com. You will find the effective date of that
Notice at the top of the Notice.
If we make a material change to uses and disclosures, your rights, our legal
duties or other privacy practices stated in this Notice, we will promptly revise
and distribute our changed Notice. Except when required by law, a material
change to any term of this Notice may not be implemented prior to the
effective date of the revised Notice.
If you believe your privacy rights have been violated, you may file a complaint
with our privacy officer and/or the secretary of the U.S. Department of Health
and Human Services. We have provided both addresses on the last page of
this Notice. To file a complaint with the Privacy Office, please call 614–408-
1680. InXite values your right to privacy. You will not be retaliated against for
filing a complaint.
Other uses of your PHI
Other uses and disclosures of your PHI not covered by the categories
included in this Notice or applicable laws, rules or regulations will be made
only with your written permission or authorization.
We are required to abide by the terms of this Notice.
The address for our privacy office is:
InXite Health Systems — Privacy Office
1 East Campus View Blvd, Suite 320
Columbus, OH 43235
The address for the United States Department of Health and Human
U.S. Department of Health and Human Services
200 Independence Ave. SW
Washington, DC 20201
Last Revision Date: November 27, 2018