This HIPAA Notice of Privacy Practices (“HIPAA Notice”) describes the electronic protected health information protection practices of Mega Aid Pharmacy (collectively, “Organization”,”we,” “our,” or “us”), including when you visit our website
We are required by law to maintain the privacy of our patients’ protected health information and to provide patients with notice of our legal duties and privacy practices with respect to protected health information.
We are required to abide by the terms of this Notice for as long as it remains in effect. We reserve the right to change the terms of this Notice as necessary and to make a new notice of privacy practices effective for all protected health information maintained by Mega Aid Pharmacy.
We are required to notify you in the event of a breach of your unsecured protected health information.
We are also required to inform you that there may be a provision of state law that relates to the privacy of your health information that may be more stringent than a standard or requirement under the Federal Health Insurance Portability and Accountability Act (“HIPAA”). A copy of any revised Notice of Privacy Practices or information pertaining to a specific State law may be obtained by mailing a request to the Privacy Officer at the address below.
You understand that you have the right to block the use of your personal information at any time.
This waiver must be in writing to contact us via email or telephone or by writing to us at the address below:
Electronic protected health information (ePHI) is protected health information (PHI) that is produced, saved, transferred or received in an electronic form. ePHI management is covered under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule.
If you give consent, all employees, agents, and staff of Mega Aid Pharmacy may access all of your electronic health information as needed.
This includes, but is not limited to, such information as:
This information may relate to sensitive health conditions, including but not limited to:
Your health information will be used by Mega Aid Pharmacy only to:
Access to Your Protected Health Information:
You have the right to copy and/or inspect much of the protected health information that we retain on your behalf. For protected health information that we maintain in any electronic designated record set, you may request a copy of such health information. Requests for access must be made in writing and signed by you or your legal representative.
Amendments to Your Protected Health Information:
You have the right to request in writing that protected health information that we maintain about you be amended or corrected. We are not obligated to make requested amendments, but we will give each request careful consideration. All amendment requests, must be in writing, signed by you or legal representative, and must state the reasons for the amendment/correction request. If an amendment or correction request is made, we may notify others who work with us if we believe that such notification is necessary.
Accounting for Disclosures of Your Protected Health Information:
Requests must be made in writing and signed by you or your legal representative.
Restrictions on Use and Disclosure of Your Protected Health Information:
You have the right to request restrictions on uses and disclosures of your protected health information for treatment, payment, or health care operations. We are not required to agree to most restriction requests, but will attempt to accommodate reasonable requests when appropriate. You do, however, have the right to restrict disclosure of your protected health information to a health plan if the disclosure is for the purpose of carrying out payment or health care operations and is not otherwise required by law. If we agree to any discretionary restrictions, we reserve the right to remove such restrictions as we appropriate. We will notify you if we remove a restriction imposed in accordance with this paragraph. You also have the right to withdraw, in writing or orally, any restriction by communicating your desire to do so to the individual responsible for medical records.
Right to Notice of Breach:
We take very seriously the confidentiality of our patients’ information, and we are required by law to protect the privacy and security of your protected health information through appropriate safeguards.
We will notify you in the event a breach occurs involving or potentially involving your unsecured health information and inform you of what steps you may need to take to protect yourself.
Paper Copy of this Notice:
You have a right, even if you have agreed to receive notices electronically, to obtain a paper copy of this Notice.
To do so, please submit a request to the Privacy Officer at the address below.
MEGA AID PHARMACY PRIVACY OFFICER
This Notice does not address, and we are not responsible for, the privacy, information, or other practices, including data privacy and security process and standards of any third parties, including physicians and other health care providers using the Services, the manufacturer of your mobile device and other IT hardware and software, and any other third-party mobile application, website, or service you can use.
We urge you to read the privacy and security policies of these third parties.
There are penalties for inappropriate access to or use of your electronic health information. If at any time you suspect that someone who should not have seen or gotten access to information about you has done so, contact
Mega Aid pharmacy privacy officer
Or you may also call the general line and ask any representative to connect you to the Privacy Officer.
All complaints must be submitted in writing.
You have an additional opportunity to contact governmental bodies on the question of inappropriate access to or use of your electronic health information:
Call the NYS Department of Health
the U.S. Department of Health & Human Services
(Secretary of HHS)
You will not be penalized for filing a complaint.
We may disclose your medical information in the course of any judicial proceeding in response to a court order, subpoena or other lawful process, but only after we have been assured that efforts have been made to notify you of the request.
We may disclose your medical information, as required by law, in response to a subpoena, warrant, summons or, in some circumstances, to report crime.
We will disclose medical information about you when required to do so by law. If federal, state or local law within your jurisdiction offers you additional protections against improper use or disclosure of medical information, we will follow such laws to the extent they apply.
We may arrange to provide some services through contracts with business associates. On occasion, we may disclose your medical information to business associates acting on our behalf. If any medical information is disclosed, we will protect your information from further use and disclosure using confidentiality agreements.
When using or disclosing protected health information or when requesting protected health information from another covered entity or business associate, we will make reasonable efforts to limit protected health information to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request.
Minimum necessary does not apply to uses and disclosures for treatment purposes.
The HIPAA Privacy Rule permits a use and exchange of PHI between health care providers for treatment and health care operations activities without your written permission.
This Consent Form will remain in effect until the day you withdraw your consent or until such time Mega Aid Pharmacy ceases operation or until 50 years after your death, whichever is later.
If you deny consent for Mega Aid Pharmacy employees and staff to access your information, your healthcare providers may not be able to access critical health information about you, obtained during a prior encounter, in a timely manner.
This Denial Form must be made in written form and sent to
MEGA AID PHARMACY PRIVACY OFFICER
All correspondences relating to the contents of this Notice should be directed as follows: