This law enforced by the Office of Civil Rights gives you - the health consumer- certain rights over your health information. It sets rules for what health care providers and health insurance companies can do with your protected health information (PHI). The Office for Civil Rights enforces the HIPAA Privacy Rule, to protect the privacy of individually identifiable health information; the HIPAA Security Rule, sets national standards for the security of electronic protected health information.

Your Rights:
• 1. You can ask to see or get a copy of your medical record and other health information. If you request a copy, you may have to put your request in writing and pay for the cost of copying and mailing. In most cases, your copies must be given to you within 30 days.


• 2. You can ask to change any information in your file or add information to your file if you think something is missing or incomplete. For example:
  • If you and your provider agree that your file has the wrong result for a test, the provider must change it.
  • If the provider believes the test result is correct, you have a right to have your disagreement noted in your file.
  • In most cases the file should be updated within 60 days.


• 3. By law, your health information can be used and shared for specific reasons not directly related to your care, like making sure doctors give good care, making sure nursing homes are clean and safe, reporting when the flu is in your area, or reporting as required by state or federal law. In many of these cases, you can find out who has seen your health information.
  
  You can:
  • Learn how your health information is used and shared by your doctor or health insurer.
    • Generally, your health information cannot be used for purposes not directly related to your care without your permission.
    • Your doctor cannot give your PHI to your employer, or share it for marketing and advertising, without your written authorization.
    • You probably received a notice telling you how your health information may be used on your first visit to a new health care provider or when you get new health insurance, but you can ask for another copy anytime.
  
  
  • Let your providers or health insurance companies know if there is information you do not want to share. You can ask that your health information not be shared with certain people, groups, or companies. For example:
    • If you go to a clinic, for example, you can ask the doctor not to share your medical records with other doctors or nurses at the clinic.
    • You can ask for other kinds of restrictions, but they do not always have to agree to do what you ask, particularly if it could affect your care.
    • Finally, you can also ask your health care provider or pharmacy not to tell your health insurance company about care you receive or drugs you take as long as you pay for the care or drugs in full and the provider or pharmacy does not need to get paid by your insurance company.
  
  
• 4. Ask to be reached somewhere other than home. For example:
  • You can make reasonable requests to be contacted at different places or in a different way.
  • You can ask to have a nurse call you at your office instead of your home.
  • You can ask to have mail sent to you in an envelope instead of on a postcard.

At Eylan Health we respect your rights and information privacy. If you think your rights are being denied or your personal health information is not being protected, please speak with us. You always have the right to file a complaint with your provider, health insurer, or the U.S. Department of Health and Human Services.

To learn more, visit Department of Health and Human Services - Health Information Privacy Page
or read the summary at Your Health Information Privacy Rights, Office for Civil Rights.