HIPAA NOTICE OF PRIVACY PRACTICES
1. HIPAA POLICY PRACTICES OVERVIEW
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
John's Heart Healthcare Group ("JHHG," "we," "our," or "us") is committed to protecting the privacy and security of your Protected Health Information ("PHI"). This Notice of Privacy Practices describes how we may use and disclose your health information and explains your rights regarding that information.
JHHG complies with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), the Health Information Technology for Economic and Clinical Health Act (HITECH), and other applicable federal and state privacy laws.
2. OUR COMMITMENT TO YOUR PRIVACY
We understand that healthcare information about you is personal.
We are required by law to:
- Maintain the privacy of your Protected Health Information (PHI)
- Provide you with this Notice of Privacy Practices
- Abide by the terms of this Notice
- Notify you if a breach of unsecured PHI occurs
- Protect your information using reasonable administrative, technical, and physical safeguards
3. WHAT IS PROTECTED HEALTH INFORMATION (PHI)?
Protected Health Information includes information that:
- Identifies you or could reasonably identify you
- Relates to your past, present, or future physical or mental health
- Relates to healthcare services provided to you
- Relates to payment for healthcare services
Examples include:
- Medical records
- Care management records
- Medication information
- Appointment information
- Insurance information
- Billing records
- healthcare communications
4. HOW WE MAY USE AND DISCLOSE YOUR INFORMATION
Treatment
We may use and disclose your PHI to provide, coordinate, or manage your healthcare.
Examples include:
- Communicating with physicians
- Coordinating care among providers
- Reviewing treatment plans
- Managing referrals
- Supporting Chronic Care Management (CCM)
- Supporting Remote Patient Monitoring (RPM)
- Supporting Remote Therapeutic Monitoring (RTM)
Payment
We may use and disclose PHI to obtain payment for healthcare services.
Examples include:
- Billing health plans
- Processing claims
- Verifying insurance eligibility
- Payment collections
- Healthcare reimbursement activities
Healthcare Operations
We may use and disclose PHI for healthcare operations including:
- Quality improvement programs
- Patient safety activities
- Staff training
- Performance measurement
- Population health management
- HEDIS quality initiatives
- Care gap closure programs
- Wellness outreach
- Compliance monitoring
- Risk management
Business Associates
We may disclose PHI to Business Associates who perform services on our behalf.
Examples may include:
- Electronic Health Record providers
- Healthcare technology vendors
- Communication platforms
- Care management systems
- Analytics providers
- Cloud service providers
Business Associates are required by law and contract to protect your information.
Appointment Reminders and Care Communications
We may contact you regarding:
- Appointments
- Follow-up care
- Care management services
- Preventive screenings
- Medication adherence
- Wellness programs
- Healthcare opportunities
- HEDIS-related outreach
Communications may occur through:
- Telephone calls
- SMS text messages
- Email communications
- AI-assisted communications
- Patient portals
Individuals Involved in Your Care
Unless you object, we may disclose relevant information to family members, caregivers, or others involved in your care or payment for care.
Public Health Activities
We may disclose PHI when required or permitted by law for:
- Disease prevention
- Public health reporting
- FDA reporting requirements
- Health oversight activities
Legal Requirements
- We may disclose PHI when required by:
- Federal law
- State law
- Court orders
- Law enforcement requests
- Government investigations
5. AI-ASSISTED COMMUNICATIONS AND TECHNOLOGY
JHHG may utilize AI-assisted technologies, automated systems, and communication platforms to support healthcare operations.
Examples include:
- Appointment scheduling
- Appointment reminders
- Care coordination
- Wellness outreach
- Population health initiatives
- HEDIS outreach
- Customer support
These technologies operate under JHHG oversight and are subject to applicable privacy and security safeguards.
Where required, vendors supporting these services may operate under Business Associate Agreements (BAAs).
6. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
You have the following rights:
Right to Inspect and Obtain Copies
You may request access to your health records and obtain copies as permitted by law.
________________________________________
Right to Request Corrections
If you believe information is incorrect or incomplete, you may request an amendment.
________________________________________
Right to Request Restrictions
You may request restrictions on certain uses and disclosures of your PHI.
While we will consider requests, we are not always required to agree.
________________________________________
Right to Confidential Communications
You may request communications through alternative methods or locations.
Examples include:
- Alternate mailing address
- Alternate phone number
- Alternate communication method
________________________________________
Right to Receive an Accounting of Disclosures
You may request a list of certain disclosures made regarding your PHI.
________________________________________
Right to Obtain a Copy of This Notice
You may request a paper or electronic copy of this Notice at any time.
________________________________________
Right to Revoke Authorizations
When disclosures are based upon your authorization, you may revoke that authorization in writing at any time.
7. OUR RESPONSIBILITIES
JHHG is required to:
- Protect your PHI
- Follow this Notice
- Implement safeguards to protect information
- Train workforce members regarding privacy obligations
- Report certain breaches when required by law
- Maintain policies and procedures supporting HIPAA compliance
8. COMPLAINTS
If you believe your privacy rights have been violated, you may file a complaint without fear of retaliation.
Complaints may be submitted to:
JHHG Privacy Officer
John's Heart Healthcare Group
11680 Great Oaks Way, Alpharetta, GA, USA 30022
Phone Number: 1(866) 314-3278
Email: info@johnsheart.life
Website: https://www.johnsheart.com
You may also file a complaint with:
U.S. Department of Health and Human Services
Office for Civil Rights
https://www.hhs.gov/ocr/privacy/hipaa/complaints/
JHHG will not retaliate against any individual for filing a complaint.
9. CHANGES TO THIS NOTICE
JHHG reserves the right to change this Notice at any time.
Revised Notices will apply to all information maintained by JHHG and will be posted on our website and made available upon request.
10. CONTACT INFORMATION
John's Heart Healthcare Group (JHHG)
11680 Great Oaks Way, Alpharetta, GA, USA 30022
Phone Number: 1(866) 314-3278
Email: info@johnsheart.life
Website: https://www.johnsheart.com
For questions regarding this Notice of Privacy Practices, please contact the JHHG Privacy Officer.