From time to time, you may see or hear certain terms that relate to this NPP. Some of the terms you are likely to see or hear are defined below:

• ·  Protected Health Information or PHI.

   PHI is individually identifiable information that relates to your medical condition(s), your treatment, and/or payments for your care, and is sent, received, or maintained electronically or in another format, such as a paper record. GRAND Mental Health uses your PHI to provide your treatment, to bill for the services we provide, and to carry out healthcare operations, such as quality assurance reviews.

• ·  Privacy Officer.

   The GRAND Mental Health Privacy Officer is the person responsible for developing and implementing all GRAND Mental Health policies concerning client privacy and PHI. The Privacy Officer is also responsible for receiving and investigating any concerns or complaints you may have about the use or disclosure of your PHI. Any GRAND Mental Health staff member can help you contact the Privacy Officer from any GRAND Mental Health facility, or you can call the main GRAND Mental Health telephone number and ask to be connected to the Privacy Officer. Your treatment will not be negatively affected, and you will not be retaliated against for expressing a concern or making a complaint to the Privacy Officer.

• ·  Business Associate.

   This an individual or business that is separate from GRAND Mental Health, but that works with GRAND Mental Health to carry out certain duties related to health care services, payment activities, and hospital operations. For example, if GRAND Mental Health used an outside company to file patients’ insurance claims, that company would be a Business Associate. Business Associates who have access to your PHI have a legal obligation to protect it from improper use or disclosure.

• ·  Authorization.

   We will obtain your authorization any time it is required to give GRAND Mental Health permission to use or disclose your PHI for purposes other than your treatment, payment of your bills, and/or conducting operations of GRAND Mental Health and its organized health care arrangement.

• ·  Health Information Exchange.

   GRAND Mental Health may participate in the exchange of electronic health information with other health care providers and health plans in the State of Oklahoma through an approved health information exchange organization. If GRAND Mental Health does participate, your electronic health records will be accessible through the exchange to properly authorized users, who will use the information for treatment, payment, and health care operations purposes, unless you direct otherwise.

GRAND Mental Health may use and disclose your PHI, without your authorization, for the following treatment, payment, and health care operations purposes:

• ·  Treatment.

   GRAND Mental Health and its professional staff may use your PHI to provide you with medical treatment or services. We may disclose your PHI to doctors, nurses, clinicians, or other GRAND Mental Health personnel who are involved in your care. For example, a doctor prescribing medicine for you would need to know other medications that you are taking and the reason for taking these medicines to help prevent any medication interaction problems. Different areas of GRAND Mental Health also may share medical information about you in order to coordinate the different things you need, such as lab work, prescriptions and other testing. This would also include the sharing of information among students of a professional training program that GRAND Mental Health may sponsor. Information may also be shared for purposes of treatment and follow-up with the Department of Mental Health and Substance Abuse and their contractors if your services are being paid for by DMHSAS.

• ·  Payment.

   We may use and disclose your PHI so that the treatment and services you receive at GRAND Mental Health may be billed to and payment may be collected from you, an insurance company, or a third party. For example, we may need to give your health plan information services you received at GRAND Mental Health so that your health plan will pay us or reimburse you those services. We may also tell your health plan about services you are going to receive to obtain prior authorization or to determine whether your plan will cover those services.

• ·  Health Care Operations.

   We may use and disclose your PHI for GRAND Mental Health’s health care operations. These uses and disclosures are necessary to manage GRAND Mental Health and to make sure that all of our clients receive quality care. For example, we may use your PHI to review our treatment and services and to evaluate the performance of our staff in caring for you. We may also combine the PHI of many GRAND Mental Health clients to decide what additional services GRAND Mental Health should offer, what services are not needed, and whether certain new treatments are effective. We may also combine the PHI of our patients with the PHI of patients from other similar facilities to compare our services with those at other facilities and to see what improvements we can make in the services we offer. For example, may combine the PHI of GRAND Mental Health clients participating in group therapy to compare it with the PHI of other facilities’ clients in group therapy, so that we can compare our performance with other facilities and make improvements in the care and services that we provide to our clients. Your identifying information will be removed from any PHI data set before it is combined or compared with PHI from other facilities, so that it may be used to study health care and health care delivery without identifying any specific client.

• ·  Business Associates.

   We may disclose your PHI to Business Associates with whom we contract to provide certain services or business operations on our behalf. However, we will only make these disclosures if we have received written assurance that the Business Associate and any subcontractors it may use will properly safeguard your privacy and the confidentiality of your PHI. For example, we may contract with a company outside of GRAND Mental Health to provide medical billing services for GRAND Mental Health.

• ·  Appointment Reminders.

    We may use and disclose your PHI to contact you as a reminder that you have an appointment for services at GRAND Mental Health. This may be done by an automated system or by one of our staff members. If you are not at home, we may leave this information on your answering machine or in a message left with the person answering the telephone. You have the right to stop appointment reminders by notifying us of your decision in writing.

• ·  Health Related Benefits and Services.

   We may use and disclose your PHI to tell you about health-related benefits or services or to recommend possible treatment options or alternatives that may be of interest to you. You may notify us in writing if you wish to restrict the manner in which we tell you about such benefits or services, for example, if you do not want to be contacted at home, or if you prefer to be contacted by mail.

• ·  Fundraising Activities of GRAND Mental Health.

   We may use or disclose your PHI to contact you in an effort to raise money for GRAND Mental Health and its operations. This type of use or disclosure would be limited to your contact information, such as your name, address, and phone number. If you do not want GRAND Mental Health to contact you for fundraising efforts, please notify the Privacy Officer.

• ·  Individuals Involved in Your Care or Payment for Your Care.

   We may disclose to a family member, close friend, or other individual you identify, the PHI that is directly relevant to that person’s involvement in your health care and/or payment for your health care. For example, we may go over your appointment schedule with the person(s) who will be driving you to appointments at GRAND Mental Health. You may object to these disclosures by notifying GRAND Mental Health personnel or Privacy Officer. We may also give PHI to someone who helps pay for your care.

• ·  Disaster Relief; Disclosure after Death.

   We may use or disclose your PHI to an entity that is authorized to assist in a disaster relief effort, so that your family, or another individual you identify, can be notified about your condition, status and location. We may also disclose relevant PHI to persons who were involved in your care or payment for your care, following your death. You may object to these disclosures by notifying a GRAND Mental Health staff member or contacting the Privacy Officer.

• ·  Research.

    Under certain circumstances, GRAND Mental Health may use and disclose your PHI for research purposes. For example, a research project may involve comparing the long-term health of all patients who received one medication to those who received another, for the same condition. All research projects, however, are subject to a special approval process. This process evaluates a proposed research project and its use of PHI, trying to balance the researchers’ needs with clients’ need for privacy of their PHI. Before we use or disclose medical information for research, the project will have been approved through this approval process. We may disclose, however, PHI about you to people preparing to conduct a research project, for example, to help identify clients with specific health care needs or conditions, so long as the PHI they review does not leave GRAND Mental Health’s facilities. We will generally ask for your specific permission if the researcher will have access to your name, address, or other information that reveals who you are, or will be involved in your care at GRAND Mental Health. If we participate in a research project, you may contact the Privacy Officer to obtain additional information about our research approval policy and process.

• ·  As Required by Law.

   We will disclose PHI about you when required to do so by federal, state, or local law. For example, Oklahoma law requires GRAND Mental Health to disclose records and information containing PHI to individuals and agencies that have contracts with the Oklahoma Department of Mental Health and Substance Abuse Services. These types of disclosures are made only when necessary and appropriate, and the disclosed PHI is limited to the minimum amount necessary.

• ·  To Avert a Serious Threat to Health or Safety.

   GRAND Mental Health and its staff may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person. Any disclosure would only be made to persons or entities who would be reasonably able to prevent or lessen the threat, such as a police officer or an outside health care professional.

• ·  Organ and Tissue Donations.

   If you are an organ donor, we may release your PHI to organizations that handle procurement or organ, eye, or tissue transplantation, or to an organ donation bank, in order to facilitate organ or tissue donation and transplantation; however, any PHI released will not state whether you have or had a history of alcohol or substance abuse.

• ·  Military.

   If you are a member of the armed forces, GRAND Mental Health and its staff may release your PHI as required by military command authorities. We may also release PHI about foreign military personnel to the appropriate foreign military authority.

• ·  Workers Compensation.

   We may release PHI about you for workers’ compensation or similar programs as authorized by state laws. These programs provide benefits for work-related injuries and illnesses.

• ·  Public Health Risks.

   We may disclose PHI about you for public health activities, such as: Preventing or controlling disease, injury, or disability; Reporting births and deaths; Reporting child abuse or neglect; Reporting reactions to medications or problems with products; Notifying people of recalls of products they may be using; Notifying a person who may have been exposed to a disease or may be at risk for contracting or spreading a disease or condition as ordered by public health authorities; and Notifying the appropriate government authority if we believe a client has been the victim of abuse, neglect, or domestic violence, if you agree or as required by law.

• ·  Health Oversight Activities.

   GRAND Mental Health may disclose PHI to a health oversight agency for activities necessary for the government to monitor the health care system, government programs, and compliance with applicable laws. These oversight activities include, for example, audits, investigations, inspections, and licensure.

• ·  Accrediting Organizations.

   We may disclose PHI to an organization that GRAND Mental Health has contracted with for purposes of accreditation, such as CARF, the Joint Commission, the Department of Mental Health, and/or the Oklahoma Health Care Authority.

• ·  Lawsuits and Disputes.

   If you are involved in a lawsuit or dispute, we may disclose PHI about you in response to a valid court order, or upon receipt of a valid written authorization.

• ·  Law Enforcement.

   We may release your PHI if asked to do so by a law enforcement official: In response to a court order, warrant, summons, or similar process; To identify or locate a suspect, fugitive, material witness, or missing person; About the victim of a crime if, under certain limited circumstances, we are unable to obtain the persons agreement; About a death that we believe may have been the result of criminal conduct; About criminal conduct at a GRAND Mental Health facility; or In emergency circumstances to report a crime; the location of the crime or victims; or the identity, description, or location of the person who committed the crime.

• ·  Coroners, Medical Examiners, and Funeral Directors..

   We may release PHI to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also release PHI about GRAND Mental Health clients to funeral directors as necessary to carry out their duties.

• ·  National Security and Intelligence Activities.

   We may release PHI about you to authorized federal officials for intelligence, counterintelligence, and other national security activities authorized by law.

• ·  Protective Services for the President and Others.

   We may disclose PHI about you to authorized federal officials so they may provide protection to the President, other authorized persons, or foreign heads of state, or conduct special investigations.

• ·  Inmates.

   If you become an inmate of a correctional institution or come into the custody of a law enforcement official, we may release PHI about you to the correctional institution or law enforcement official, when necessary (a) for you to receive appropriate health care; (b) to protect your health and safety or the health and safety of others; or (c) for the safety and security of the correctional institution and law enforcement personnel.

You have the following rights regarding the PHI we maintain about you:

• ·  Right to Inspect and Copy.

   You have the right to inspect and request a copy of your PHI maintained in the “designated record set,” except as prohibited by law. The “designated record set” is the PHI in your medical and billing records used to make decisions about your care and payment for your care, as determined by GRAND Mental Health. You also have the right to authorize third parties (such as a family member) to obtain your PHI. To inspect and/or request a copy of your PHI in the designated record set, you must submit your request in writing on an approved Authorization form. You may obtain an Authorization form by contacting the Privacy Officer. If you request a copy of your PHI, we may charge a reasonable fee to offset the costs associated with your request, such as labor, postage, etc. This fee would be at the Oklahoma statutory rate, plus postage if applicable. You will be advised of any fees at the time you make your request. We may deny your request to inspect and copy in certain circumstances. If you are denied access to certain PHI, you may request that the denial be reviewed. Your request and the denial will be reviewed by the Clinical Director or by another licensed health care professional chosen by GRAND Mental Health. The person conducting the review will not be the person who denied your request. We will comply with the outcome of the review.

• ·  Right to Amend.

   If you feel that PHI we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for GRAND Mental Health. To request an amendment, your request must be made in a writing that states the reason for the request. Requests for amendments should be submitted to the Clinical Director for GRAND Mental Health, 114 West Delaware, Nowata, OK 74048. We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that: Was not created by GRAND Mental Health, unless the person or entity that created the information is no longer available to make the amendment; Is not part of the PHI kept by or for GRAND Mental Health; Is not part of the information which you would be permitted to inspect and copy; or Is accurate and complete.

• ·  Right to an Accounting of Disclosures.

   You have the right to request an accounting, or list, of certain disclosures we have made of your PHI. You are entitled to one free accounting every 12 months. We may charge you a reasonable fee for providing an accounting of disclosures more often than every 12 months. We will notify you of any costs involved when we receive your request, and you may choose to modify or withdraw your request before any charges are incurred. To request an accounting of disclosures, you must submit your request in writing to the Privacy Officer for GRAND Mental Health. Your request must state a time period of no more than six years that does not include dates before April 14, 2003. An accounting, or list, of disclosures does not include disclosures made: To carry out treatment, payment, or healthcare operations; To you, of your own PHI; Incident to a use or disclosure permitted by law; Pursuant to your signed Authorization; For national security or intelligence purposes; To correctional institutions or law enforcement officials; As part of a limited data set not including your individually identifiable information; or That occurred more than 6 years prior to your request.

• ·  Right to Request Restrictions.

   You have the right to request a restriction or limitation on the PHI we use or disclose about you for treatment, payment, or health care operations. You also have the right to request a limit on the PHI we disclose about you to someone who is involved in your care or in the payment for your care, such as a family member or friend. For example, you could ask that we not use or disclose information about a medication you are taking. In certain circumstances, we are not required to agree to your request. If we do agree, we will comply with your request unless the information is needed to provide you with emergency treatment. To request restrictions, you must make your request in writing to the Privacy Officer for GRAND Mental Health. In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure, or both; and (3) to whom you want the restriction to apply.

• ·  Right to Request Confidential Communications.

   You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you can ask that we only contact you at work or by mail. To request confidential communications, you must make your request in writing. We will not ask you the reason for your request. We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted. For example, if request that we only contact you at work, you must provide us with your work contact information.

• ·  Right to a Paper Copy of This NPP.

   You have the right to a paper copy of this NPP. You may ask us to give you a copy of this NPP at any time. Even if you have agreed to receive this notice electronically, you are still entitled to a paper copy of this notice. To obtain a paper copy of this notice, please contact the Administrative Office of any GRAND Mental Health facility.

We reserve the right to make changes to this NPP. We reserve the right to make the revised or changed NPP effective for PHI we already have about you as well as any PHI we create or receive in the future. We will post a copy of the current NPP in each GRAND Mental Health facility and on our website. The effective date of the NPP will be on the first page, near the top. In addition, each time you register at a GRAND Mental Health facility for treatment or health care services we will offer you a copy of the current NPP. We have a legal duty to abide by the NPP currently in effect.

Other uses and disclosures of PHI that are not covered by this NPP or by the laws that apply to GRAND Mental Health will be made only with your written Authorization. If you provide us Authorization to use or disclose your PHI, you may revoke that Authorization, in writing, at any time. If you revoke your Authorization, we will no longer use or disclose PHI about you for the reasons covered by your written Authorization. You understand that we are unable to take back any disclosures we have already made with your Authorization, and that we are required to retain our records of the care that we provided to you.

If you believe your privacy rights have been violated, you may file a written complaint with the GRAND Mental Health Privacy Officer or the Secretary of the Department of Health and Human Services and/or the Office of Civil Rights, DHHS. You can do this a few ways: Tell your clinician, who will report the information to the Operational Director or GRAND Mental Health Privacy Officer. File a written complaint and give it to your clinician, the Operational Director or mail it to the GRAND Mental Health Privacy Officer at: GRAND Mental Health ATTN Privacy Officer 12005 E 470 Rd Claremore, OK 74017 Leave a message on the Corporate Complaint hotline: 918-273-1841, ext. 2555. Contact the  Secretary of the Department of Health and Human Services and/or the Office of Civil Rights, DHHS. Call their toll free number at 1-800-368-1019 or visit their website at hhs.gov/ocr.

The confidentiality of any alcohol or drug abuse treatment records maintained by GRAND Mental Health is protected by federal laws and regulations. Generally, GRAND Mental Health may not disclose that a client is, or has been, in an alcohol or drug abuse treatment program, or disclose any information identifying a client as an alcohol or drug abuser, UNLESS: The client consents in writing; The disclosure is allowed by a court order; or The disclosure is made to medical personnel in a medical emergency or to authorized persons for research, audit, or program evaluation purposes. Violation of these federal laws and regulations by a program is a crime. Suspected violations may be reported to appropriate local authorities or to the U.S. Attorney’s Office. Federal laws and regulations do not protect any information about a crime committed by a client either at the program or against any person who works for the program, or about any threat to commit such a crime. Federal laws and regulations do not protect any information about suspected child abuse or neglect from being reported under state law to appropriate state or local authorities. [See, 42 U.S.C. §290dd-3 and 42 U.S.C. §290ee-3 for federal laws and 42 C.F.R. Part 2 for federal regulations.]