Bridges Community Health
Notice of Privacy Practice
HIPAA Notice of Privacy Practices and Policies:
Bridges Community Health (BCH) may use and disclose health information about clients with their signed consent. Health information may include information both created and received by BCH and it may be in the form of writing, electronic records, or spoken words. It may include information about your health history, health status, symptoms, examinations, test results, diagnoses, treatments, procedures, prescriptions and/or other health-related information.
BCH may use and disclose your health information in order to:
- Make decisions about and plan your care and treatment.
- Refer to and consult with, coordinate and manage with other health care providers for your care and treatment.
- Determine your eligibility for health plans or health insurance coverage and submit billing claims and other related information to insurance companies or others who may be responsible for paying for some or all of your health care.
- Perform various administrative and business functions that support your practitioner and provider’s efforts to provide you with, arrange for, and be reimbursed to quality, cost effective health care.
All staff of Bridges Community Health are required to follow confidentiality guidelines both in and outside of the office, complete HIPAA training annually, and follow all state and federal regulations. This includes HIPAA section 42 CFR part 2 and regulations as specified in ORS 179.505 and 192.518 through 192.530. BCH will let you know promptly if a breach occurs that may have compromised the privacy or security of your information. If there is a breach of your health information, we will notify you in accordance with both HIPAA and Oregon data breach laws.
The Privacy Rule protects all “individually identifiable health information” held or transmitted by a covered entity or its business associate, in any form or media, whether electronic, paper, or oral. The Privacy Rule calls this information “protected health information (PHI). “Individually identifiable health information” is information, including demographic data, that relates to: the individual’s past, present or future physical or mental health or condition, the provision of health care to the individual, or the past, present, or future payment for the provision of health care to the individual, and that identifies the individual or for which there is a reasonable basis to believe it can be used to identify the individual. Individually identifiable health information includes many common identifiers (e.g., name, address, birth date, Social Security Number).
You have the right to ask to see or get an electronic or paper copy of your medical record and other health information on file at BCH. Bridges Community Health will respond to your records request within 10 business days, as required by Oregon law. Psychotherapy notes (i.e., notes kept separately from the rest of your medical record) are not included in the records you are entitled to access under HIPAA.
You have the right to receive and review a written description of how BCH will handle health information about you. This written description is known as a “Notice of Privacy Practices” and describes the use and disclosures of health information made, and the information practices followed by BCH.
Patient Consent for Use and Disclosure of Protected Health Information:
I hereby give my consent for Bridges Community Health to use and disclose my protected health information (PHI) to perform treatment, payment and health care operations (TPO). With this consent, the Practice may call me or email me to my home or other alternative location and leave messages by voice, email or in person in reference to any items that assist the Practice in carrying out TPO, such as appointment reminders, insurance items and anything pertaining to my clinical care, including labratory test results. With this consent, the Practice may send mail to my home or other alternative location any items that assist the Practice in performing TPO, such as appointment reminder cards, patient statements and anything pertaining to my clinical care.
Minor Consent & Privacy Laws in Oregon: (ORS 109.675)
In Oregon, individuals aged 14 and older may consent to outpatient mental health services. We will not share their health information with parents or guardians unless:
- The minor agrees to the disclosure,
- There is a significant safety concern, or
- Disclosure is required by law.
Mandatory reporting requirements:
I understand that all employees of Bridges Community Health are considered “mandatory reporters” under Oregon law (ORS 419B.005). Employees are required to report if they have reasonable cause to believe a child, elderly person, or disabled adult has suffered abuse, neglect, or abandonment. Abuse includes physical injury, sexual abuse, neglect, or mental injury. In Oregon child abuse includes a child witnessing domestic violence amongst adults in the home. The obligation to report overrides the general rule of client confidentiality, meaning information regarding abuse cannot remain confidential. Reports are made to the Department of Human Services (DHS) or local law enforcement. My provider may need to break confidentiality if I pose a serious threat of harm to myself or others. In this event my emergency contact and/or law enforcement will be contacted.
Filling a complaint:
You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1-877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.