PRIVACY POLICY & NOTICE OF PRIVACY PRACTICE
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
The HIPAA Privacy Rule requires healthcare providers to notify patients of their rights regarding their Protected Health Information (“PHI”) and to explain how that information may be used and disclosed. This Notice describes the privacy practices of Calata Medical Group and applies to all team members and business associates acting on our behalf.
HOW WE MAY USE AND DISCLOSE HEALTH INFORMATION
Below are the ways in which we may use and disclose your PHI. Except as listed below, we will not use or disclose your information without your written authorization. You may revoke an authorization at any time by submitting a written request.
TREATMENT
We may use and disclose PHI to provide, coordinate, or manage your medical care. For example, we may share information with physicians, nurses, technicians, or other healthcare providers involved in your treatment.
PAYMENT
We may use and disclose PHI to bill and receive payment from you, insurance companies, or third-party payers. For example, we may share information with your health plan so they can process payment for services received.
INDIVIDUAL INVOLVED IN YOUR CARE
We may share PHI with a family member, close friend, or other person involved in your care or in payment for your care, when appropriate. We may also share limited information in a disaster relief situation.
HEALTH OPERATIONS
We may use and disclose PHI for healthcare operations, such as quality assessment, training, auditing, and business management. We may also share information with other entities that have a relationship with you (such as your health plan) for their healthcare operations.
APPOINTMENT REMINDERS & HEALTH INFORMATION
We may contact you to remind you of appointments or to provide information about treatment alternatives or health-related services that may interest you.
RESEARCH
Under certain circumstances, we may use or disclose PHI for research purposes. Research projects must undergo a special approval process. Researchers may review records to identify potential study participants, but they may not remove PHI without authorization.
FUNDRAISING ACTIVITIES
We may contact you for fundraising purposes. You have the right to opt out of receiving fundraising communications by submitting a written request.
SMS/TEXT MESSAGE PRIVACY & OPT-IN DISCLOSURE
We do not share, sell, rent, or transfer your mobile phone number, SMS opt-in information, or text messaging consent to any third parties for marketing or for any other purpose. Mobile numbers collected for SMS communications are used solely to deliver messages related to your opt-in, such as appointment reminders, medication notices, or practice-related updates.
– Messaging frequency may vary.
– Message and data rates may apply, depending on your mobile carrier.
– To opt out of SMS messages at any time, text STOP.
– For help or assistance, text HELP or visit our website.
– You may continue to receive medical care even if you opt out of SMS communications.
EMAIL PRIVACY
We do not share, sell, rent, or transfer patient email addresses to any third parties for marketing or unrelated purposes. Email addresses are used only for communication related to your care, appointments, billing, or practice operations unless you provide written authorization for other uses.
SPECIAL SITUATIONS
We may use or disclose PHI without your authorization in the following circumstances:
As Required by Law
We will disclose PHI when required by federal, state, or local law.
Medical Examiners & Funeral Directors
We may share PHI with coroners, medical examiners, or funeral directors as needed following a patient’s death.
Military and Veterans
If you are a member of the armed forces, we may disclose PHI as required by military authorities.
To Prevent a Serious Threat
We may disclose PHI to prevent a serious threat to your health or safety, or that of the public.
Business Associates
We may disclose PHI to business associates performing services on our behalf (e.g., billing services). Business associates are required by law and contract to safeguard your information.
HEALTH INFORMATION EXCHANGES (HIEs)
We may participate in secure electronic Health Information Exchanges to improve coordination of your care. If you do not wish to participate, you may request and complete an HIE Opt-Out Form. You may continue receiving care even if you opt out.
Data Breach Notifications
We may use your contact information to provide legally required notice of any breach involving your PHI.
Workers’ Compensation
We may disclose PHI for workers’ compensation or similar programs.
Public Health
We may disclose PHI to report diseases, injuries, adverse reactions, product recalls, or abuse or neglect as permitted or required by law.
Organ and Tissue Donation
If you are an organ donor, we may release PHI to assist in organ or tissue procurement.
YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
You have the following rights regarding your PHI:
Right to Access
You may request to inspect or obtain a copy of your PHI, including electronic records. We will provide the information in the format requested if feasible. Reasonable fees may apply.
Right to Amend
If you believe your PHI is incorrect or incomplete, you may request an amendment in writing.
Right to an Accounting of Disclosures
You may request a list of certain disclosures made without your authorization.
Right to Request Restrictions
You may request restrictions on the use or disclosure of your PHI. While we are not required to agree, if we do, we will comply unless the information is needed for emergency treatment.
Right to Confidential Communications
You may request that we contact you in a specific way or at a specific location. Reasonable requests will be accommodated.
Right to a Paper Copy
You may request a paper copy of this Notice at any time.
CHANGES TO THIS NOTICE
We reserve the right to change this Notice and apply the revised Notice to all PHI we maintain. The current Notice will be posted in our office and/or on our website and will include the effective date.
COMPLAINTS
If you believe your privacy rights have been violated, you may file a complaint with our office or with the U.S. Department of Health and Human Services. You will not be penalized for filing a complaint.
NON-COMPLIANCE
Failure to comply with Calata Medical Group policies and procedures may result in disciplinary action, termination of employment or services, and/or legal action as permitted by law.
Effective Date: 11-20-2025