Notice of Privacy Practices (NOPP)

Part 2 - Public Health responsibilities

Public Health is required by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) to protect your PHI. PHI is information that we have created or received about your health or payment for your health care. It includes your health records and personal information like your name, social security number, address, and phone number.

• We are required to maintain the privacy of your PHI according to the law.
• We will let you know if there is a breach of your PHI.
• We must follow the terms of this Notice and give you a copy of it.
• We will not use or share your PHI other than as described in this Notice unless you give us written permission.
• We may change our practices regarding the PHI we maintain, and we may update this Notice at any time. The updated Notice will be provided to you. You may also request it, and it will be posted in all Public Health care centers, and on our web site at www.kingcounty.gov/health.

Part 3 - Our uses and disclosures of your PHI

Public Health uses and shares PHI for your treatment, payment for your care, and health care operations. This section explains how we may use or share your PHI without your authorization.

How we typically use and share your PHI

Treating you – We may use health information to provide you with health treatment or services. We may share health information about you with other healthcare professionals involved in your care. For example, your doctor will need to know if you are allergic to any medicines. The doctor may share this information with pharmacists and others caring for you.

Billing for your health care services – We may use and share your health information to bill and get payment for services provided to you. For example, if you have health insurance, we may need to give your health plan information about your visit, your diagnosis, procedures, and supplies used so that we can get payment for the treatment provided. However, we will not disclose your health information to a third-party payer without your authorization except as required by law.

Running our health care services – We may use and share your health information to run our practice, improve your care, and contact you when needed. For example, we may use your health information to review the quality of services you receive or to provide training for our staff. Or we may contact you by telephone or by mail to remind you of an appointment or to inform you of test results.

Other ways we use and share your PHI

We are required or allowed by law to share your health information in other ways that usually contribute to the public good such as public health and research. We must meet requirements in the law before we can share your PHI for the following purposes:

• For research purposes.
• For joint activities with individuals or organizations that engage in joint treatment, payment or health care operational activities.
• As required by state or federal law, including with the Department of Health and Human Services (HHS), if HHS investigates Public Health to see if we are complying with requirements in this Notice.
• For judicial and administrative proceedings such as a court order, subpoena, discovery request, or other lawful process.
• For law enforcement purposes or to a law enforcement official.
• For abuse reports and investigations such as suspected cases of abuse, neglect, or domestic violence, when the law requires.
• To medical examiners/coroners or funeral directors to allow them to carry out their duties.
• To comply with workers’ compensation laws that provide benefits for work-related injuries or illness.
• For organ, eye, or tissue donation purposes such as organ procurement organizations.
• For specialized government functions such as Supplemental Security Income (SSI) benefits, national security or military activities; or law enforcement custodial correctional institutions.
• To avoid serious threat to health or safety of a person or the public when we believe it necessary.
• For public health and safety purposes such as to health care oversight agencies.
• For disaster relief assistance and efforts.
• For health information exchange (HIE): We may make your PHI available electronically through an information exchange service to other healthcare providers, health plans, and healthcare clearinghouses that request your information for treatment or payment for that treatment. Participation in HIE services also allows us to see information about you from other participants. Your participation in a certain HIE’s may be voluntary with an option to opt-out. When possible, you will be provided with educational information prior to enrollment in these services. For more information contact the Public Health Compliance Office.
• For joint activities of the electronic health record: Public Health is part of an organized health care arrangement called the Oregon Community Health Information Network (OCHIN), which includes other participating health care providers. OCHIN supplies information technology and related services and engages in quality assessment and improvement activities on behalf of its participants. For example, OCHIN coordinates clinical review activities on behalf of participating organizations to establish best practice standards and assess clinical benefits that may be derived from the use of electronic health record systems. OCHIN also helps participants work collaboratively to improve the management of internal and external patient referrals. Your health information may be shared by Public Health with other OCHIN participants when necessary for treatment, payment, or health care operation purposes. A current list of OCHIN participants is available at https://ochin.org/our- members/ochin-members

Other uses and disclosures require your written authorization

In general, Public Health does not engage in marketing, psychotherapy notes, or the sale of PHI. However, we are required to inform you that most use of PHI for these purposes requires your authorization.

Uses and disclosures not described in this Notice will be made only as allowed by law or with your written permission. However, the recipient of your PHI may not be required to follow the requirements of this Notice.

Part 4 - Prohibited uses and disclosures of your PHI

This section explains state and federal laws that require we provide a higher level of protection for some types of PHI.

Protected health care services (reproductive health care services and gender-affirming treatment)

If Public Health receives an out-of-state or federal request for your records related to reproductive health care services or gender-affirming treatment, we must:

• Get your written authorization, OR
• Require the requestor to sign a sworn statement that the request is not for the purpose of investigating or punishing someone for violating another state's law that makes it illegal to provide or receive protected health care services that are lawful in the state of Washington.

Substance use disorder program treatment records

If you participate in certain Public Health Substance Use Disorder services, we cannot share your information for treatment, payment or health care operation purposes without your written consent.

STD/HIV/AIDS

Public Health cannot share your information and records related to sexually transmitted diseases, including information related to you investigating, considering or requesting a test or treatment, except as authorized by law or if you have given your authorization.