As required by federal and state law, as well as the Professional and Ethical Compliance Code for Behavior Analysts, this notice serves to inform you of Wellness Institute of Neurodevelopment (WIN) legal and ethical responsibilities, as well as your rights, with respect to using and disclosing the protected health information (PHI) of your child.
Our Commitment to Your Privacy
WIN is committed to protecting the PHI of your child and your family. PHI includes, but is not limited to, assessment results, diagnostic reports, treatment plans, and data collected during the course of treatment. WIN employees have an ethical and legal obligation to protect the privacy of your health information.
The terms of this notice apply to all records containing your PHI that are created or retained by our practice. We reserve the right to revise or amend this Notice of Privacy Practices. Any revision or amendment to this notice will be effective for all of your records that our practice has created or maintained in the past, and for any of your records that we may create or maintain in the future. This Notice is posted in our offices in a visible location and on our website at all times. WIN is required to provide you with a copy of this Notice of Privacy Practices and abide by the use and disclosure terms outlined below.
WIN may use or disclose your PHI when authorized by you to do so. We may disclose your PHI without your consent if mandated by law or where permitted by law for a valid purpose such as those outlined below.
1.1 Treatment. WIN employees may use your PHI to treat your child. For example, we may ask you to submit previous assessment results, and we may use the results to help us reach a diagnosis or to develop a treatment plan. WIN employees may also disclose your PHI to other WIN employees for quality care purposes. In such situations, the amount of information disclosed will be the minimum necessary. Employment at WIN does not assume the right to use or disclose your child’s PHI.
1.2 Treatment Options. WIN may use and disclose your child’s PHI in order to inform you of potential treatment options and alternatives.
1.3 Consultation. To ensure your child receives the highest quality treatment possible, WIN employees may seek consultation with other professionals. In such situations, your consent will be requested and/or the disclosure of your PHI will be limited to the minimum necessary.
1.4 Appointment Reminders. WIN may use and disclose information to contact you as a reminder that you have an appointment. We will usually call you on the phone number provided to us and leave a message for you if required. However, you may request that we provide reminders with certain restrictions. We will endeavor to accommodate all reasonable requests.
1.5 Health-Related Benefits and Services. WIN may use and disclose PHI to inform you about health-related benefits and services that may be of interest to you.
1.6 Protection From Harm. If a WIN employee believes your child has been the victim of abuse, neglect, or domestic violence, we may disclose PHI as required to do so by law to protect, or prevent potential harm to, your child.
1.7 Health Care Entities. We may disclose your PHI to health care entities for quality review purposes. In such situations, the disclosure of health information is limited to the minimum that is necessary to achieve the desired purpose.
1.8 Health Care Operations. Use and disclosure of your child’s PHI may be necessary to operate our business. For example, we may use your child’s PHI to evaluate the quality of care you receive from us, or to conduct business planning activities for our practice.
1.9 Business Associates. Often, contractors, subcontractors, and other outside persons, and companies that are not employees of WIN may need access to your PHI when providing services. We call these entities “business associates.” To protect your health information, WIN requires our business associates to protect and verify the protection of your information.
The following categories describe unique scenarios in which we may use or disclose your child’s PHI.
2.1 Public Health Activities. WIN may disclose your PHI to public health authorities that are authorized by law to collect information for the purpose of:
2.2 Law Enforcement. WIN may disclose your PHI in the following situations:
2.3 Workers Compensation. WIN may disclose PHI to the extent authorized by and to the extent necessary to comply with workers compensation laws.
2.4 Funeral Directors. WIN may release PHI to a medical examiner, coroner, or funeral director so they may perform their jobs.
2.5 Research. WIN may use and disclose your PHI to researchers when the information does not directly identify your child or when a waiver has been issued by an Institutional Review Board that has reviewed the research proposal for compliance with standards to ensure the privacy of your PHI.
You have the right to inspect and obtain a copy of your child’s medical record and partake in actions that protect the accuracy and privacy of the PHI contained within the record. These actions are listed below.
3.1 Request of Records. You have the right to inspect and obtain a copy of medical information that may be used to make decisions about the care of your child. Note that this does not include psychotherapy notes. To request a copy of your child’s health information, please submit your request in writing by emailing email@example.com. As part of WIN’s commitment to the environment, we will provide you with an electronic copy of your records for a small fee (cost of a USB and labor costs). You will receive your requested records within 30 days of the request.
We may deny your request to inspect and copy in certain limited circumstances. In these circumstances, you have the right to request a review of the denial by a healthcare professional not involved in the initial request.
3.2 Amendment. If you feel that PHI in your child’s records is incorrect, you may ask us to amend the information. We will amend the information if it was created by us and if sufficient evidence is submitted that clearly challenges the accuracy of the information. We cannot amend PHI if it was not created or retained by us, it is not part of the medical information kept by WIN , it is not part of the information which you would be permitted to inspect and copy, or if we believe the information is accurate and the submitted evidence does not support the claim of incorrect information.
3.3 Right to Accounting Disclosures. You have the right to request an accounting of disclosures of your child’s PHI made by WIN. We are not required to list disclosures made for the following reasons:
To request an accounting of disclosures, please submit your request in writing by emailing firstname.lastname@example.org.
3.4 Copy of Notice of Privacy Practices. You will have access to this document at all times but if you would like a paper copy of this document, please submit your request in writing by emailing email@example.com.
3.5 Request Restrictions. You have the right to request a limitation on the use, disclosure, or communication of your child’s PHI. You also have the right to request a limit on the information we communicate to someone who is involved in the care of your child and how we communicate with you about your child’s PHI. Please submit a written request to our privacy officer at 5757 Woodway Drive, Houston, Tx 77057 and outline what information you want to limit and to whom you want the limits to apply.
3.6 Receive Notice of a Breach. We are required to notify you of any breaches of unsecured PHI as soon as possible but no later than 60 days following the discovery of the breach. The notice will include a brief description of the breach including a description of the type of PHI involved in the breach, steps taken by WIN to investigate, mitigate losses, and protect against future breaches, steps that should be taken by you to protect you from potential harm as a result of the breach, and contact information should you have questions about the breach.
3.7 Complaints. If you believe you or your child’s privacy rights have been violated, we encourage you to file a written complaint with our privacy officer at 5757 Woodway Drive, Houston, Tx 77057. You may also file a health information privacy complaint with the United States Department of Health and Human Services. The complaint must be made in writing by mail, fax, email, or via the OCR Complaint portal and must be filed within 180 days of when you knew the act or omission occurred. For more information, please go to https://www.hhs.gov/hipaa/