Notice of Privacy Practices

The privacy of your protected health information (“PHI”) is important to us. Your Smile Doctors practice (the “Practice”) is required by law to: (i) maintain the privacy of PHI; (ii) provide individuals with notice of the Practice’s legal duties and privacy practices with respect to PHI; (iii) notify affected individuals following a breach of unsecured PHI; and (iv) follow the terms of the Notice that is currently in effect. This Notice will remain in effect until the Practice replaces it.

The Practice reserves the right to change its privacy practices and the terms of this Notice at any time, provided such changes are permitted by applicable law, and to make new Notice provisions effective for all PHI that the Practice maintains. When the Practice makes a significant change in its privacy practices, it will change this Notice and post the new Notice clearly and prominently at its practice location and on the Smile Doctors LLC website. Further, the Practice will provide copies of the new Notice upon request.

You may request a copy of the Practice’s Notice at any time. For more information about the Practice’s privacy practices, or for additional copies of this Notice, please contact Dr. Greg Goggans, Privacy Officer, using the information listed at the end of this Notice.

HOW THE PRACTICE MAY USE AND DISCLOSE YOUR PHI

The Practice may use and disclose your PHI for different purposes, including but not limited to treatment, payment, and health care operations. For each of these categories, the Practice has provided a description and an example below. Some information, such as HIV-related information, genetic information, alcohol and/or substance abuse records, and mental health records, if applicable, may be entitled to special confidentiality protections under applicable state or federal law. The Practice will abide by these special protections as they pertain to applicable cases involving these types of records.

Treatment. The Practice may use and disclose your PHI for treatment purposes. For example, the Practice may disclose your PHI to a physician/dentist, dental auxiliaries, or other healthcare providers providing treatment to you.

Payment. The Practice may use and disclose your PHI to obtain reimbursement for the treatment and services you receive from the Practice. Payment activities include but are not limited to billing, collections, claims management, and determinations of eligibility and coverage to obtain payment from you, an insurance company, or another third party. For example, the Practice may send claims to your health plan containing certain PHI.

Healthcare Operations. The Practice may use and disclose your PHI in connection with its healthcare operations. Healthcare operations include but are not limited to quality assessment and improvement activities, reviewing the competence or qualifications of healthcare professionals, evaluating practitioner and provider performances, conducting training programs, accreditation, certification, licensing, or credentialing activities.

Individuals Involved in Your Care or Payment for Your Care. The Practice may disclose your PHI to a family member, other relative, close personal friend, or any other individual identified by you relative to that person’s involvement in your care or in the payment for your care. In the event of your absence or incapacity or in emergency circumstances, the Practice may, based on a determination in its providers’ professional judgment, disclose certain of your PHI that is directly relevant to such person’s involvement in your healthcare and treatment. Additionally, the Practice may disclose information about you to your personal representative. If a person has the authority by law to make health care decisions for you, the Practice will treat that personal representative the same way it would treat you with respect to your PHI.

Appointment Reminders. The Practice may use or disclose your PHI to provide you with appointment reminders (such as voicemail messages, text messages, emails, postcards, or letters).

Disaster Relief. The Practice may use or disclose your PHI to assist in disaster relief efforts.

Required by Law. The Practice may use or disclose your PHI when it is required to do so by law.

Public Health Activities. The Practice may disclose your PHI for public health activities, including disclosures to:

• Prevent or control disease, injury or disability;
• Report potential abuse, neglect, or domestic violence;
• Report reactions to medications or problems with products or devices;
• Notify a person of a recall, repair, or replacement of products or devices;
• Notify a person who may have been exposed to a disease or condition; or

National Security. The Practice may disclose to military authorities the PHI of armed forces personnel under certain circumstances. The Practice may disclose to authorized federal officials health information required for lawful intelligence, counterintelligence, and other national security activities. The Practice may disclose PHI to a correctional institution or law enforcement official that or who has lawful custody of the patient.

Secretary of HHS. The Practice will disclose your PHI to the Secretary of the U.S. Department of Health and Human Services when required to investigate or determine compliance with HIPAA or other federal laws.

Worker’s Compensation. The Practice may disclose your PHI to the extent authorized by, and to the extent necessary to comply with, laws relating to workers’ compensation or other similar programs established by law.

Law Enforcement. The Practice may disclose your PHI for law enforcement purposes as permitted and authorized under HIPAA or other applicable law. These oversight activities include but are not limited to audits, investigations, inspections, and credentialing, as required by law, or in response to a subpoena or court order.

Health Oversight Activities. The Practice may disclose your PHI to an oversight agency for activities necessary for licensure and for the government to monitor the health care system, government programs, and compliance with civil rights laws.

Judicial and Administrative Proceedings. If you are involved in a lawsuit or a dispute, the Practice may disclose your PHI in response to a court or administrative order. The Practice may also disclose PHI in response to a subpoena, discovery request, or other lawful process instituted by someone else involved in the dispute, but only if efforts have been made, either by the requesting party or the Practice, to tell you about the request or to obtain an order protecting the information requested.

Research. The Practice may disclose information to researchers when their research has been approved by an institutional review board or privacy board that has reviewed the research proposal and established protocols to ensure the privacy of your PHI.

Coroners, Medical Examiners, and Funeral Directors. The Practice may release your PHI to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. The Practice may also disclose PHI to funeral directors consistent with applicable law to enable them to carry out their duties.

To Avert a Serious Threat to Health or Safety. The Practice may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.

Fundraising. The Practice may contact you to provide you with information about its sponsored activities, including fundraising programs, as permitted by applicable law. If you do not wish to receive such information from the Practice, you may opt out of receiving the communications.
Business Associate. Some of the Practice’s activities are provided on its behalf through contracts with business associates. When the Practice enters into contracts to obtain these services, the Practice may need to disclose your PHI to a business associate so that the business associate may perform the job for which the Practice has contracted; however, the Practice requires its business associates to appropriately safeguard your PHI.

OTHER USES AND DISCLOSURES OF PHI

Your authorization is required, with limited exceptions, for disclosure of psychotherapy notes, use or disclosure of PHI for marketing, and for the sale of PHI. The Practice will also obtain your written authorization before using or disclosing your PHI for purposes other than those provided for in this Notice (or as otherwise permitted or required by law). You may revoke an authorization in writing at any time. Upon receipt of the written revocation, the Practice will stop using or disclosing your PHI, except to the extent that it has already taken action in reliance on the authorization or as required under applicable law.

YOUR HEALTH INFORMATION RIGHTS

Access. You have the right to view or obtain copies of your PHI and other treatment information, with limited exceptions. You must make the request in writing. You may obtain a form to request access by using the contact information listed at the end of this Notice. You may also request access by sending the Privacy Officer a message to the email address set forth at the end of this Notice. If you request information that the Practice maintains on paper, the Practice may provide photocopies. If you request information that the Practice maintains electronically, you have the right to an electronic copy. The Practice will use the form and format that you request if readily producible. The Practice will charge you a reasonable cost-based fee for the cost of supplies and labor of copying, and for postage if you want copies mailed to you. Contact the Privacy Officer using the information listed at the end of this Notice for an explanation of the Practice’s fee structure.

If you are denied a request for access, you have the right to have the denial reviewed in accordance with the requirements of applicable law.

Disclosure Accounting. With the exception of certain disclosures, you have the right to receive an accounting of disclosures of your PHI in accordance with applicable laws and regulations, with such disclosures being available for the 6 years prior to the date of such request. To request an accounting of disclosures of your PHI, you must submit your request in writing to the Privacy Officer. If you request this accounting more than once in a 12-month period, the Practice may charge you a reasonable, cost-based fee for responding to the additional requests.

Right to Request a Restriction. You have the right to request additional restrictions on the Practice’s use or disclosure of your PHI by submitting a written request to the Privacy Officer. Your written request must include (i) what information you want to limit, (ii) whether you want to limit the Practice’s use, disclosure, or both, and (iii) to whom you want the limits to apply. The Practice is not required to agree to your request except in the case where the disclosure is to a health plan for purposes of carrying out payment or health care operations, and the information pertains solely to a health care item or service for which you, or a person on your behalf (other than the health plan), has paid the Practice in full.

Alternative Communication. You have the right to request that the Practice communicates with you about your PHI by alternative means or at alternative locations. You must make your request in writing.

Your request must specify the alternative means or location and provide a satisfactory explanation of how payments will be handled under the alternative means or location you request. The Practice will accommodate all reasonable requests; however, if the Practice is unable to contact you using the methods or locations you have subsequently requested, then the Practice may contact you using any information that it has available.

Amendment. You have the right to request that the Practice amend your PHI. Your request to amend must be in writing, and it must explain why you believe your information should be amended. If the Practice agrees to your request, it will amend your record(s) and notify you of such amendment. However, the Practice may deny your

request to amend under certain circumstances. If the Practice denies your request for amendment, it will provide you with a written explanation regarding the reason for denial and will further explain your rights.

Right to Notification of a Breach. You will receive notifications of breaches of your unsecured PHI as required by law.

Electronic Notice. You may receive a paper copy of this Notice upon request, even if you have agreed to receive this Notice electronically on the Practice’s website or by electronic mail (e-mail).

Questions and Complaints. If you would like more information about the Practice’s privacy practices or have questions or concerns, please contact the Privacy Officer using the contact information set forth at the end of this Notice.

If you: (i) are concerned that the Practice may have violated your privacy rights, (ii) disagree with a decision the Practice made about (a) access to your PHI or (b) in response to a request you made to amend or restrict the use or disclosure of your PHI, or (iii) would like to have the Practice communicate with you by alternative means or at alternative locations, you may communicate as such to the Privacy Officer using the contact information listed at the end of this Notice. You may also submit a written complaint to the Secretary of the U.S. Department of Health and Human Services. The Privacy Officer will provide you with the address to file a complaint with the U.S. Department of Health and Human Services upon request.

The Practice supports your right to the privacy of your PHI. The Practice will not retaliate in any way if you choose to file a complaint with the Practice or with the U.S. Department of Health and Human Services.

Our Privacy Officer: Dr. Greg Goggans

Telephone: 1 (877) 221-9008
Email Address: [email protected]