Notice of Privacy Practices
This notice describes how medical information about you may be used and disclosed and how you can access this information. Please review it carefully.
Who Are We?
This notice describes AAA Mental Health Community Services' privacy practices, including each of our facilities in Florida. When we say "AAAMHCS," we mean all these facilities, individually and collectively.
Our Privacy and Confidentiality Obligations
We are required by law to maintain the privacy and confidentiality of information about your health, healthcare, and payment for services related to your health (referred to generally in this notice as "protected health information" or "information") and to provide you with this notice of our legal duties and privacy practices about your protected health information. Therefore, when we use or disclose this information, we must abide by the terms of this notice (or notice in effect at the time of the use or disclosure).
Protected Health Information in connection with substance use disorder services: • 42 CFR Part 2 protects health information when applying for or receiving services (including diagnosis or treatment, or referral) for substance use disorder. Generally, it supposes you are applying for or receiving services for substance use disorder. In that case, order, we may not acknowledge to any person outside the program that you attend the program except in some cases as listed in this notice.
All Protected Health Information, including substance use disorder services:
The Health Insurance Portability and Accountability Act ("HIPAA") Privacy Regulations (45 CFR Parts 160 and 164) also protect your health information whether or not you are applying for or receiving services for substance use disorder. The differences are listed in this notice.
Uses and Disclosures with Your Authorization
Generally, we may use or disclose your protected health information when you give your written authorization in a way that meets the legal and regulatory requirements. You may consent to approval in writing unless we have already acted based on that authorization before knowing it was revoked.
But some exceptions allow use and disclosure without your authorization or consent. They are listed below.
Uses and Disclosures Without Your Authorization
Even without your written authorization, we may use and disclose information as explained below. This list applies to all protected health information, including the information we get when you apply for or receive services for substance use disorder.
Treatment. We may use your health information and share it with other professionals treating you. We will obtain your consent before sharing your health information with professionals outside this facility.
For example, counselors may disclose your information to each other to coordinate your treatment plan or other services that may benefit or interest you.
Health Care Operations. We may use and share your health information to run our facility, improve your care, and contact you when necessary. For example, we may disclose information to qualified personnel for program and outcome evaluation or financial audits. In addition, we may disclose your information within AAAMHCS to resolve any complaints or issues about your care. We may also disclose your protected health information to an agent or agency providing services to AAAMHCS under a qualified service organization agreement or business associate agreement, as long as there is an agreement to protect your information's confidentiality. Healthcare operations may also include using your data for AAAMHCS programs, like when we invite you to an alum event or marketing communications.
Other Permitted Uses and Disclosures. We are allowed or required to share our information in different ways – usually in ways that contribute to the public good, such as public health and research. However, we must meet many conditions in the law before we can share your information for these purposes.
Medical Emergencies. We can disclose your information to medical personnel to meet a bona fide medical emergency (as defined by 42 CFR Part 2). For example, this information might include HIV status, if applicable.
Crime on the Premises or Against Program Personnel. We can disclose your information to law enforcement officials if you commit a crime on the premises, against any personnel, or if you threaten to do so.
Minors. We may disclose to a parent or guardian or other person authorized under state law to act on behalf of a minor those facts about a child which are relevant to reducing a threat to the life or physical wellbeing of the minor or any other individual if the program director judges that the minor applicant cannot make a rational decision and the minor's situation endangers the life or physical wellbeing of the child or any other individual which may be reduced by communicating relevant facts to such person.
Child Abuse and Neglect. We can disclose protected health information to report child abuse and neglect.
Deceased and Incompetent Patients. In these cases, we can share protected health information with a personal representative, guardian, or other person authorized by applicable state law.
Decedents. When an individual dies, we can share protected health information with a coroner, medical examiner, or funeral director.
Respond to Lawsuits and Legal Actions. We can disclose your information in response to a court order that meets legal requirements.
Law Enforcement Purposes. We can disclose your information to law enforcement if the official has obtained a warrant with a court order designed to preserve the confidentiality of individuals seeking or receiving substance use disorder treatment services.
Research. We can use or share protected health information for health research, but only if the researcher has first obtained your consent or consulted an institutional review board formed to protect the privacy of research subjects.
Marketing Communications. We may contact you with information about AAAMHCS services and products that benefit you. These communications are part of Health Care Operations. Examples include invitations to alum events and continuing care programs.
Uses and Disclosures Without Your Authorization – Not in Connection with Substance Use Disorder, Diagnosis, Treatment, or Referral
If you are not applying for or receiving services for substance use disorder, the rules governing the use and disclosure of protected health information are sometimes less restrictive. This section lists the additional permitted disclosures that can be made without your authorization if you are not applying for or receiving services for substance use disorder.
Payment. We may use and disclose your protected health information so that the treatment and services you receive at AAAMHCS may be billed to and paid for by an insurance company, you, or a third party. For example, we may disclose relevant information to your health plan to obtain approval for your diagnostic testing or treatment services.
When Required by Law. We may disclose your protected health information as state or federal law requires.
Authorized Representatives. We may disclose your health information to a person appointed by a court to represent or administer your interests.
Health or Safety. We may disclose your protected health information to avert or lessen a serious threat of harm to you, others, or the public.
Public Health and Health Oversight Activities. We may disclose your protected health information for public health and health oversight purposes, including for licensing, to auditing or accrediting agencies authorized or allowed by law to collect such information, including, for example, when we are required to collect, report or disclose information about the disease, injury, vital statistics for public health purposes or other information for investigation, audit, or other health oversight purposes.
Secretary of Health and Human Services. We must disclose your health information to the United States Department of Health and Human Services when requested to enforce privacy laws.
We are reporting for Investigation of Abuse. We may disclose protected health information to a person legally authorized to investigate a report of abuse or neglect.
Law Enforcement Purposes. We may disclose protected health information to law enforcement officials in response to a valid court order or warrant or as otherwise required or permitted by law.
Judicial and Administrative Proceedings. We may disclose your health information under a valid court or administrative order or, in some cases, in response to a valid subpoena or discovery request.
Your Individual Rights
Right to Receive Confidential Communications. Usually, we will communicate with you through the phone number or address you provide. But you may request, and we will accommodate, any reasonable, written request for you to receive your protected health information by alternative means of communication or at an alternative location.
Right to Request Restrictions. At your request, we will not disclose health information to your health plan if the disclosure is for payment of a health care item or service for which you have paid AAAMHCS out of pocket and in full. You may also request restrictions on our use and disclosure of protected health information for treatment, payment, and healthcare operations. While we will carefully consider requests for more conditions, we need not agree to a requested restriction. If you wish to order more rules and are now receiving services, please get in touch with your counselor or case manager. Once you no longer receive assistance, contact the Records Department in writing. We will send you a written response.
Right to Inspect and Copy Your Health Information. You may request access to your medical records for inspection and ask for copies of the documents. Under limited circumstances, we may deny you access to a portion of your records. If you desire access to your records and are now receiving services, please ask your counselor or case manager. Once you are no longer receiving benefits, contact the Records Department.
Right to Amend Your Records. You can request that we amend protected health information maintained in your clinical file or billing records. If you desire to amend your records and are receiving services, please get in touch with your counselor or case manager. Once you are no longer receiving benefits, contact the Records Department. In some cases, AAAMHCS has the right to deny a request to amend your records and will notify you of this denial as provided in the HIPAA regulations. If your requested amendment to your records is accepted, a copy of your amendment will become a permanent part of the medical record. When we "amend" a form, we may append information to the original document rather than physically removing or changing the original record. If your requested amendment is denied, you will be informed of your right to have a brief statement of disagreement placed in your medical history.
Right to Receive an Accounting of Disclosures. Upon request, you may obtain a list of instances when we disclosed your protected health information other than when you gave written authorization or those related to your treatment and payment for services or our health care operations. The accounting will apply only to covered disclosures before the date of your request. If you request an accounting more than once during twelve months, we reserve the right to charge a fee. You will be told the cost before the request is filled.
Right to Receive Notification of Breach. You will be notified if we discover a breach has occurred (when your protected health information may have been compromised). A risk analysis will be conducted to determine the probability that protected health information has been compromised. Notification will be made no more than 60 days after the breach's discovery unless a law enforcement agency determines that the report should be delayed.
Right to Receive a Paper Copy of this Notice. Upon request, you may obtain a paper copy of this notice.
If you want more information about your privacy and confidentiality rights, contact the AAAMHCS Records Department at (305) 456-3000 or care@aaamhcs.com. In addition, you may contact the Records Department if you are concerned that we have violated your privacy rights, if you disagree with a decision that we made about access to your protected health information, or if you wish to complain about our breach notification process.
You may also file a written complaint with the United States Department of Health and Human Services Secretary. Upon request, we will provide you with the address. We will not retaliate against you if you file a complaint. Violating federal law and regulations on Confidentiality of Substance Use Disorder Patient Records is a crime, and suspected violations of 42 CFR Part 2 may be reported to the United States Attorney in the district where the breach occurs. Again, we will provide the appropriate agency contact information upon request.
Effective Date and Duration of this Notice
Effective Date. The effective date of this notice is 21 January 2023.
Right to Change the Terms of this Notice. Right to Change Terms of This Notice. We may change the terms of this notice at any time. If so, we may make the new notice terms effective for all protected health information we maintain, including any information created or received, before issuing further notice. In addition, we will post any changes to this notice in public access areas at our service sites and on our internet site at www.aaamhcs.com. You may also obtain any new information by contacting the AAAMHCS Records Department.
Records Department. You may contact the AAAMHCS Records Department at (305) 456-3000 or care@aaamhcs.com.
AAA Mental Health Community Services.