HIPAA NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice describes how we may use and/or disclose your protected health information (“PHI”), and the rights you have with respect to your PHI. “PHI” includes any information that (i) may identify you, (ii) is created, received, maintained, or transmitted by SleepGlad LLC (“the Company”), and (iii) relates to your past, present, or future physical or mental health or condition, the provision of health care to you, or the past, present, or future payment for the provision of health care to you. We are committed to protecting the privacy of your PHI. This Notice applies to all PHI created, received, maintained, or transmitted by the Company. All employees and business associates of the Company who may have access to your PHI are permitted to use and disclose your PHI only as set forth in this Notice.

I.                YOUR RIGHTS

You have the right to:

·       Receive a Copy of Your Medical Record. You have the right to see or obtain an electronic or paper copy of your medical record and other health information we have about you. You must submit your request in writing to our Privacy Officer, as identified on the last page of this Notice. We will provide a copy or a summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee for providing you a copy of your medical record.

·       Ask us to Amend Your Medical Record. If you feel that information in your medical record is incorrect or incomplete, you may ask us to amend the information. To request an amendment, your request must be made in writing and submitted to the Company's Privacy Officer, as identified on the last page of this Notice. We will respond to your request within 60 days. In certain circumstances, we may deny your request for an amendment. Our written denial will state the reasons for the denial and explain your right to file a written statement of disagreement with the denial. If you don’t file one, you have the right to ask that your request and our denial be attached to all future disclosures of your PHI.

·       Receive an Accounting of Disclosures. You have the right to ask for an accounting (list) of the times we’ve shared your health information, who we shared it with, and why. The list will include all the disclosures except for those pertaining to treatment, payment, and healthcare operations, and certain other disclosures (such as any you asked us to make). To request an accounting of disclosures, you must submit your request in writing to our Privacy Officer, as identified on the last page of this Notice. Your request must state a time period, which may not be longer than six years prior to the date of your request. We will respond within 60 days of receiving your request. We’ll provide one accounting per year for free, but may charge a reasonable, cost-based fee for any additional requests for an accounting.

·       Request Restrictions on How We Use Your PHI. You may ask us not to use or share certain health information for treatment, payment, or healthcare operations purposes, and may request a limit on the information we share with someone who is involved in your care, like a family member or friend. We are not required to agree to your request. If we do agree, we will comply with your request unless the information is needed to provide you emergency treatment or unless the information is required to be disclosed by law. If you pay for a healthcare item or service out-of-pocket in full, you may ask us not to share information regarding such item or service with your health insurance company. We will comply with your request, unless the information is required to be disclosed by applicable law. To request a restriction, you must make your request in writing to our Privacy Officer, as identified on the last page of this Notice.

·       Request Confidential Communications. You may ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will not ask you the reason for your request, and will accommodate all reasonable requests. To request confidential communications, you must make your request in writing to our Privacy Officer, as identified on the last page of this Notice. Your request must specify how or where you wish to be contacted.

·       Receive a Copy of this Notice. You may ask for a paper copy of this Notice at any time, even if you have agreed to receive the Notice electronically. We will promptly provide you with a paper copy. To obtain a paper copy of this Notice, contact our Privacy Officer, as identified on the last page of this Notice.

·       Choose Someone to Act for You. If you have designated a healthcare power of attorney or someone is your legal guardian or personal representative, that person may exercise your rights and make choices about your health information. We will confirm that the person has authority to act on your behalf before we take any action.

·       File a Complaint. If you believe your privacy rights have been violated, you may file a complaint with the Company or the Department of Health and Human Services, Office for Civil Rights (“OCR”). To file a complaint with us, please contact our Privacy Officer at the address and telephone number listed below. Forms and instructions for filing a complaint with OCR may be found at the following web address: https://www.hhs.gov/hipaa/filing-a-complaint/complaint-process/index.html. You will not be retaliated against or penalized by us for filing a complaint.

II.              YOUR CHOICES

For certain health information, you may tell us your choices about what we share. In the following situations, you have the right and choice to tell us to:

·       Share information with your family, close friends, or others involved in your care

·       Share information in a disaster relief situation

·       Include your information in a hospital directory

If you are not able to tell us your preference (for example, if you are unconscious), we may share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.

We never share your information for the following purposes unless you give us written permission:

·       Marketing purposes

·       Sale of your information

·       Most sharing of psychotherapy notes

We may contact you for fundraising purposes, but you may tell us not to contact you again.

III.            OUR USES AND DISCLOSURES OF PHI

Treatment, Payment, and Healthcare Operations:

We typically use or share your information for the following purposes, as permitted by HIPAA:  

·       Treatment. We may use and disclose your PHI to provide, coordinate, or manage your treatment and related services. We may disclose PHI about you to doctors, nurses, technicians, or other personnel who are involved in taking care of you.

·       Payment. We may use and disclose your PHI in order for the treatment and services you receive to be billed to, and payment collected from, an insurance company or other third party. For example, we may need to give your health plan information about your treatment so your health plan will pay us or reimburse you for the cost of that treatment.

·       Health Care Operations. We may use and disclose your PHI for our own healthcare operations purposes. For example, we may use PHI to review our treatment and services and to evaluate the performance of our staff in caring for you. We may also disclose PHI to another healthcare provider for certain health care operations of that entity, if the entity either has or had a treatment relationship with you, and the PHI pertains to such relationship. 

·       Disclosures to Business Associates. We may disclose your PHI to third party "business associates" that perform various functions on behalf of the Company and that have agreed to provide the same protections for your PHI.

Other Permitted Uses and Disclosures:

The following are some additional purposes for which we may use and disclose your PHI, as permitted by HIPAA:

·       As Required by Law. We may share information about you if state or federal law requires it, including with the U.S. Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.

·       Organ and Tissue Donation. If you are an organ donor, we may disclose PHI about you to organizations that handle organ or tissue transplantation or to an organ donation bank, as necessary to facilitate organ or tissue donation and transplantation.

·       Workers’ Compensation, Law Enforcement and Other Government Requests. We may use or share your PHI: (i) for workers’ compensation claims; (ii) for law enforcement purposes or with a law enforcement official; (iii) with health oversight agencies for activities authorized by law; (iv) for special government functions such as military, national security, and presidential protective services.

·       Public Health and Safety Issues. We may disclose PHI about you for certain situations, such as: (i) preventing disease; (ii) helping with product recalls; (iii) reporting adverse reactions to medications; (iv) reporting suspected abuse, neglect, or domestic violence; and (v) preventing or reducing a serious threat to anyone’s health or safety.

·       Research. We may use or share your PHI for health research.

·       Medical Examiners and Funeral Directors. We may share PHI with a coroner, medical examiner, or funeral director when an individual dies.

·       Lawsuits and Legal Actions. We may share your PHI in response to a court or administrative order, or in response to a subpoena.

IV.            OUR RESPONSIBILITIES

·        We are required by law to maintain the privacy and security of your PHI.

·        We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.

·        We must follow the duties and privacy practices described in this Notice and provide you a copy of it.

·        We will not use or share your information other than as described in this Notice unless you tell us we can in writing. If you tell us we can, you may change your mind at any time by letting us know that in writing.

V.              CHANGES TO THIS NOTICE

We may change the terms of this Notice at any time, and the changes will apply to all information we have about you. The revised Notice will be available upon request, in our office, and on our website.

VI.            PRIVACY OFFICER

The Company’s Privacy Officer for all issues regarding your rights under HIPAA is Carrie Bell, who may be contacted by phone at (866) 757 - 4523, by email at Privacy@SleepGlad.com, and by writing to the following address:

                                                          SleepGlad LLC

Attn: Privacy Officer

                                                          1100 Hatcher Lane

                                                          Columbia, TN  38401

VII.          EFFECTIVE DATE

This Notice is effective as of August 30, 2022 and was last revised August 30, 2022