1) What is Protected Health Information (“PHI”)? 2) What PHI does COHC SMBP Program Application collect? 3) Who does COHC SMBP Program Application share my PHI with and why? 4) What are my rights to my PHI? 5) What should I do if I have a question or concern about my collected PHI?
What is Protected Health Information?
COHC SMBP Program Application receives and maintains certain personal information about all our members. Some of this personal information is protected by federal and state laws. This type of information is known as “protected health information” or “PHI”. PHI is health information that identifies or could be used to identify a specific person.
What PHI does COHC SMBP Program Application collect?
When you voluntarily give your PHI to COHC SMBP Program Application through our application we maintain such PHI in our secure systems. Examples of PHI you may provide to COHC SMBP Program Application include: email, phone number, and blood pressure values.
Who does COHC SMBP Program Application share my PHI with and why?
We use or disclose your PHI to COHC for monitoring and potential treatment for the purpose of the American Heart Association’s SMBP program. We need your written authorization to use or disclose your health information for any purpose not covered by one of the categories below. We will not use or disclose your PHI for marketing purposes or sell your PHI, unless you have agreed to this use or disclosure. You can inform us at any time that you no longer allow us to use or disclose your PHI for the reasons shown below, but this will not stop any disclosure that we made based on your prior authorization. The law permits us to use and disclose your health information for the following purposes: Treatment: We may use or disclose your PHI to healthcare professionals at COHC for treatment purposes. Healthcare Operations – We may use or disclose your PHI for activities necessary to support our healthcare operations, such as performing quality checks on our services, internal audits, arranging for legal services, data analysis or developing reference ranges for our services. We provide only the minimal PHI to accomplish the intended purpose of the use and disclosure of the PHI. These entities are also required to keep the PHI confidential and secure. Business Associates – We may disclose your PHI to other companies or individuals that need the information to provide services to us. These other entities, known as “business associates,” are required to also keep the PHI confidential and secure. For example, we may provide information to companies that assist us with support services. De-identifiable and Aggregated Format – We may use and disclose your PHI in a de-identifiable and aggregated manner to review our impact on all our members health and in hopes of making the COHC SMBP Program Application even more effective to help you with your management of your blood pressure. Law Enforcement Activities, Legal Proceedings and Court Orders – We may use and disclose your PHI to prevent or minimize a serious threat to your health and safety or that of another person. We may also provide PHI to law enforcement officials, for example, in response to a warrant, investigative demand or similar legal process, or for officials to identify or locate a suspect, fugitive, material witness, or missing person. We may also disclose PHI to appropriate agencies if we reasonably believe an individual to be a victim of abuse, neglect or domestic violence. We may disclose your PHI if required to do so with a court or administrative order. We may disclose your PHI in response to a subpoena, discovery request or other legal process during a judicial or administrative proceeding. We may also disclose PHI to those assisting in disaster relief efforts so that others can be notified about your condition, status and location. Family and Friends: At your request, we may disclose PHI to a family member, friend, or anyone else you inform us to provide the information to.
What are my rights to my PHI?
What should I do if I have a question or concern about my collected PHI?