Privacy Policy

Our Legal Duty: We have a duty to protect the confidentiality of medical information about you.  We are required to provide you with a Notice of Privacy Practices explaining ways we may use and disclose your medical information. The Notice also describes your legal rights and our obligations regarding the use and disclosure of your medical information.

Parties Following The Notice: The Notice will be followed by the Hospital, together with their health care professionals, staff and volunteers; members of the Hospital Medical Staff and those participating in managed care networks with the Hospital; and other legal entities that provide services to the Hospital.

How We May Use and Disclose Medical Information About You: We may use or disclose identifiable health information about you for many reasons, including:

• Treatment
• Payment
• Health care operations
• Health oversight activities
• Public health purposes
• Auditing
• National security and protective services
• Research
• Worker’s compensation
• Lawsuits and disputes
• Law enforcement purposes
• Activities of managed care networks in which we participate
• Activities of our organized health care arrangement
• Appointment reminders
• Organ donation
• To avert a serious threat to health or safety
• To coroners, medical examiners, and funeral directors
• To military command authorities
• As required by law
• Additional Uses and Disclosures Required by 2026 Regulations
  • Substance Use Disorder (SUD) Confidentiality (42 CFR Part 2)
    • We will not use or disclose PHI related to substance use disorder treatment unless permitted by federal law or authorized by the patient. Redisclosure of SUD information is prohibited unless allowed under 42 CFR Part 2.
  • Combined HIPAA and Part 2 Authorization (2026 Update)
    • A single authorization may now allow the use and disclosure of SUD information for treatment, payment, and healthcare operations. We will obtain this authorization when required and honor revocations submitted in writing.
  • Reproductive Health Attestation Requirement (2024–2026 Update)
    • We may require a signed attestation before disclosing PHI related to reproductive healthcare to confirm the request is not for prohibited investigative or law‑enforcement purposes.

In general, other uses and disclosures of your medical information will require your written authorization. We may use or disclose certain limited information about you, unless you object or request a limitation of the disclosure, for:

• Hospital directories
• Individuals involved in your care or payment

Your Privacy Rights:

You have the following rights with respect to your health information:

• The right to request confidential communications and alternative means of communication with you.
• The right to request restrictions on certain uses of your health information.
• The right to inspect and copy certain medical information that we maintain about you.
• The right to request an amendment of your health information.
• The right to an accounting of certain disclosures of your health information.
• Right to be notified of a breach.
• Right to a paper copy of this notice.
• Additional Rights Required by 2026 Regulations
  • Restrictions on Disclosure to Health Plans (2026 Update)
    • We will not disclose PHI to a health plan for items or services paid in full by the patient, unless required by law.
  • Expanded Accounting of Disclosures (2026 Update)
    • Patients may request an accounting of certain disclosures made in the previous three years, including disclosures of SUD information as required by federal law.
  • Right to File Complaints for SUD or Reproductive‑Health Privacy (2026 Update)
    • Patients may file complaints with HHS or SAMHSA if they believe their SUD or reproductive‑health information was used or disclosed improperly.

Changes to the Notice: We reserve the right to change the Notice. We will post any revised Notice in the Hospital.

Complaints:  If you believe your rights have been violated, you may file a written complaint with the Director of Medical Records at 478-994-2521 or with the Secretary of the U.S. Department of Health and Human Services by going to hhs.gov/hipaa. You will not be punished for filing a claim.