Notice of HIPAA Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW THIS NOTICE CAREFULLY.

Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), LabEspy is required by law to maintain the privacy of health information that identifies you, called Protected Health Information ("PHI"), and to provide you with notice of our legal duties and privacy practices regarding PHI. At LabEspy, we are committed to safeguarding the privacy and confidentiality of your personal health information to the full extent required by law.

Use or Disclosure of your PHI

Generally, we may not use or disclose your personal health information without your permission. The following are the circumstances under which we are permitted by law to use or disclose your personal health information.

We may use and disclose PHI in performing business activities, which we call "health care operations". These health care operations allow us to improve the quality of care we provide and reduce health care costs. We may use or disclose your PHI for the following health care operations:

  • To evaluate and develop new or existing testing programs, monitor quality, and perform other activities related to the overall operation of LabEspy for improving the quality, efficiency and cost of care that we provide.
  • Conducting business management and general administrative activities related to LabEspy and the services it provides. And also planning for our organization’s future operations, and fundraising for the benefit of our organization.
  • Assisting health oversight activities like state or federal health oversight agencies that are authorized by law to oversee our operations.
  • Potential merger or acquisition involving our business in order to make an informed decision regarding any such prospective transaction.
  • Professional services we obtain, such as legal services, audit functions, legal compliance, and detection of fraud or abuse.

We may use and/or disclose your PHI under a number of circumstances in which you do not have to consent, give authorization or otherwise be given an opportunity to agree or object. Those circumstances include, but are not limited to:

  • To provide, coordinate or manage your health care and related services. This may also include communicating with health care providers like doctors, nurses, technicians or hospital personnel that are involved with your care.
  • To collect payment for the treatment and services provided to you. We may also share portions of your medical information with Collection departments or agencies; and Consumer reporting agencies (e.g., credit bureaus).
  • Required by federal, state or local laws or in furtherance of law. We may use or disclose your personal health information to the extent that such use or disclosure is required by law and the use or disclosure complies with and is limited to the relevant requirements of such law. Examples of instances in which we are required to disclose your personal health information include: (a) public health activities including, preventing or controlling disease or other injury, public health surveillance or investigations, reporting adverse events with respect to food or dietary supplements or product defects or problems to the Food and Drug Administration, medical surveillance of the workplace or to evaluate whether the individual has a work-related illness or injury in order to comply with Federal or state law; (b) disclosures regarding victims of abuse, neglect, or domestic violence including, reporting to social service or protective services agencies; (c) health oversight activities including, audits, civil, administrative, or criminal investigations, inspections, licensure or disciplinary actions, or civil, administrative, or criminal proceedings or actions, or other activities necessary for appropriate oversight of government benefit programs; (d) judicial and administrative proceedings in response to an order of a court or administrative tribunal, a warrant, subpoena, discovery request, or other lawful process; (e) law enforcement purposes for the purpose of identifying or locating a suspect, fugitive, material witness, or missing person, or reporting crimes in emergencies, or reporting a death; (f) disclosures about decedents for purposes of cadaveric donation of organs, eyes or tissue; (g) for research purposes under certain conditions; (h) to avert a serious threat to health or safety; (i) military and veterans activities; (j) national security and intelligence activities, protective services of the President and others; (k) medical suitability determinations by entities that are components of the Department of State; (l) correctional institutions and other law enforcement custodial situations; and (m) covered entities that are government programs providing public benefits, and for workers’ compensation. Among our workforce and affiliated providers to provide your requested services. We are permitted to disclose minimal amount of your PHI that is reasonably required to complete the activities.
  • Under certain circumstances, we may disclose your PHI for medical research, studies or to run analytics reports. We may also create and distribute de-identified health information by removing all references to individually identifiable information.
  • To send you reminders about your appointments for treatment or medical care and to provide information about latest health services, treatments, products or health care providers that may be of interest to you. We may also send you newsletters or promotional items of nominal value.

Under any circumstances other than those listed above, we will ask for your prior written authorization before we use or disclose your PHI. If you sign a written authorization allowing us to disclose your PHI in a specific situation, you may later cancel your authorization in writing. If you cancel your authorization in writing, we will not disclose your PHI after we receive your cancellation, except for disclosures which were being processed before we received your cancellation.

Your PHI Privacy Rights

Right to Request Restrictions on Use or Disclosure

You have the right to request that we restrict the use and disclosure of your PHI. We are not required to agree to your requested restrictions. However, if we do agree to your request we will abide by the restrictions except under the following circumstances: emergency treatment, disclosures to the Secretary of the Department of Health and Human Services, and uses and disclosures described in the previous section of this Notice. You may request a restriction by submitting your request in writing.

Right to Receive Confidential Communications

You have the right to request how and where we contact you about your PHI. Your request must be in writing, via letter or e-mail, and we must accommodate reasonable requests.

Right to Inspect and Copy Your PHI

You have the right to request to see and receive a copy of PHI contained in clinical, billing and other records related to the services we provide to you. Your request must be in writing, via letter or e-mail. We may charge you related copying fees. Instead of providing you with a full copy of the PHI, we may give you a summary or explanation of the PHI about you, if you agree in advance to the form and cost of the summary or explanation. There are certain situations in which we are not required to comply with your request. Under these circumstances, we will respond to you in writing, stating why we will not grant your request and describing any rights you may have to request a review of our denial.

Right to Amend Your PHI

You have the right to request that we make amendments to clinical, billing and other records used to make decisions about you. Your request must be in writing and must explain your reason(s) for the amendment. We may deny your request if: 1) the information was not created by us (unless you prove the creator of the information is no longer available to amend the record); 2) the information is not part of the records used to make decisions about you; 3) we believe the information is correct and complete; or 4) you would not have the right to see and copy the record as described in paragraph 3 above. We will tell you in writing the reasons for the denial and describe your rights to give us a written statement disagreeing with the denial. If we accept your request to amend the information, we will make reasonable efforts to inform others of the amendment, including persons you name who have received your PHI and who need the amendment.

Right to Receive an Accounting of Disclosures of Your Personal Health Information

If you ask our contact person in writing, you have the right to receive a written list of certain of our disclosures of your PHI. You may ask for disclosures made up to six (6) years before your request (not including disclosures made prior to April 14, 2003). We are not required to include disclosures: 1) For billing and collection of payment for your treatment; 2) For our health care operations; 3) Requested by you, that you authorized, or which are made to individuals involved in your care; and 4) Allowed by law. The list will include the date of the disclosure, the name (and address, if available) of the person or organization receiving the information, a brief description of the information disclosed, and the purpose of the disclosure. If you request a list of disclosures more than once in 12 months, we may charge you a reasonable fee.

Changes to this Privacy Policy

We reserve the right to change our privacy practices and the terms of this notice at any time, provided such changes are permitted by applicable law. We reserve the right to make changes in our privacy practices and the new terms of our notice effective for all health information that we maintain, including health information we created or received before we made the changes. Before we make a significant change in our privacy practices, we will change this notice and make the new notice available upon request.

Complaints

If you are concerned that we have violated your privacy rights or have any questions or complaints about the privacy of your health information, LabEspy wants to hear from you. Please contact our Privacy Officer at privacy@labespy.com or you may write to:

Attention: Privacy Officer
5001 Spring Valley Road, Suite 400 East
Dallas, TX - 75244