Notice of Privacy Practices
ParamountABA is committed to obtaining, maintaining, using and disclosing your protected health information (“PHI”) in a manner that protects your privacy. We urge you to read this Notice of Privacy Practices (this “Notice”), effective June 19, 2018, carefully in order to understand both our commitment to the privacy of your child’s PHI and your rights.
ParamountABA Notice of Privacy Practices
ParamountABA is required by law to maintain the privacy of your child’s PHI and to provide you with a notice of our legal duties and privacy practices with respect to PHI. PHI is information about your child, including basic demographic information, that may identify your child and that relates to your child’s past, present or future physical or mental health condition, treatment, or payment for health services. This Notice describes how we may use and disclose your child’s PHI to carry out treatment, payment or health care operations, and for other specified purposes that are permitted or required by law. The Notice also describes your rights with respect to your child’s PHI.
ParamountABA reserves the right to amend this Notice from time to time. When material changes are made, ParamountABA will promptly post the updated Notice on the ParamountABA website at www.paramountaba.org and at ParamountABA facilities, where copies will also be available for you upon request. ParamountABA is required to abide by the terms of the Notice currently in effect.
Safeguarding Confidential Information about Clients
ParamountABA will safeguard confidential information about clients. ParamountABA provides a wide range of programs, services and activities. ParamountABA may obtain, collect, maintain, use, transmit, share and/or disclose information about clients in the administration of its programs, services and activities, and as necessary to assist clients in accessing and receiving services. ParamountABA will safeguard confidential information about clients, inform clients about the company’s privacy practices and respect client privacy rights.
Minimum Necessary Access, Use & Disclosure
ParamountABA will use or disclose only the minimum amount of information necessary to provide services to clients. ParamountABA staff work in clinical teams and team members may, in the course of their job duties, need to use/disclose information on a variety of clients. This will only be done in the course of providing services to a client and only those staff members needing to use and disclose a particular client’s information will have access to that information. Specific roles such as Office Manager, Human Resources Manager, Accounting, Support Services, and Information Systems will only have access to client information necessary to carry out the duties of their jobs.
ParamountABA may use or disclose your PHI for the following purposes:
- ParamountABA may use or disclose PHI for purposes of providing your medical treatment. For example, ParamountABA may disclose your child’s PHI to their primary care physician if needed in order to coordinate your medical care.
- ParamountABA may use or disclose PHI for purposes of billing and collecting payment for our services. For example, we may disclose PHI to your health plan in order to obtain payment for our services.
- Health Care Operations. ParamountABA may use or disclose PHI to facilitate our business’s health care operations. For example, we may review your child’s PHI internally as part of an audit to confirm quality of our services being delivered to our patients.
- As Required by Law. ParamountABA may use or disclose PHI if required to do so by federal or state law.
- Disclosures to your child’s Representative and/or Individuals Involved in Your Care. ParamountABA may disclose your PHI to your friends or family members who are involved in your child’s care, including those who are responsible for paying for your child’s care and/or those who assist in your child’s transportation to or from appointments. ParamountABA may also disclose PHI to your child’s personal representative, as established under applicable law, or to an administrator or authorized individual associated with your estate.
- Disclosures to Business Associates. ParamountABA may disclose your child’s PHI to certain of our service providers that have agreed to maintain the privacy and security thereof. For example, if ParamountABA contracts with an IT vendor, they may have access to certain aspects of your child’s PHI – and they will also agree to protect its confidentiality.
- De-Identification of PHI. ParamountABA may de-identify your child’s PHI, meaning that ParamountABA would remove all identifying features as determined by law to make it extremely unlikely that the information could identify your child. De-identified information no longer qualifies as PHI, meaning that ParamountABA may use and disclose it for purposes not set forth in this Notice.
ParamountABA may also use or disclose your child’s PHI in other ways as permitted by law. Generally, these are ways that serve the public health and/or research. Specifically:
- ParamountABA may use or disclose your child’s PHI as needed to assist with public health and safety issues and may disclose your child’s PHI to law enforcement officials when needed, to health oversight agencies for authorized activities, and for special government functions including national security needs.
- ParamountABA may disclose your child’s PHI as needed to organ procurement organizations, medical examiners, and funeral directors in the event of an individual’s death.
- ParamountABA may use or disclose your child’s PHI in response to a court or administrative order, or in response to a subpoena.
- Uses and disclosures of PHI for purposes other than those described above, including for marketing purposes and disclosures that would constitute a sale of PHI, will not be made in the absence of a written authorization signed by you or your child’s personal representative. Once you sign an authorization, you may revoke it by contacting ParamountABA at any time unless it has already been relied upon to use or disclose PHI.
Client Privacy Rights
The HIPAA Privacy Rules, as well as other federal and state laws and regulations, describe specific actions that a client can take or request to be taken with regard to the uses and disclosures of his/her information.
You have the following rights with respect to your PHI:
- You have the right to request restrictions on certain uses and disclosures of your child’s PHI. ParamountABA will consider every request to restrict uses or disclosures of your child’s PHI and will strive to honor those that are reasonable. However, ParamountABA is not legally required to honor each request unless the requested restriction involves a disclosure not required by law to a health plan for purposes of payment or health care operations, and you have paid for the applicable services in full out of pocket. With respect to any requested restriction, if ParamountABA agrees to honor it, we will document such restriction and continue to abide by it.
- You have the right to receive confidential communications of your child’s PHI from ParamountABA. Specifically, you may request that ParamountABA communicate with you about your child’s PHI using a specific means, phone number, or address. ParamountABA will accommodate reasonable requests regarding confidential communications of your PHI.
- Subject to applicable state law, you have the right to inspect and copy your child’s PHI. You also have the right to access and receive your child’s PHI electronically if readily producible in such format.
- You have the right to correct or update your child’s PHI. If you believe that there is an error in your child’s PHI, you may request that ParamountABA update it as appropriate.
- You have the right to receive an accounting of certain disclosures of your child’s PHI made by ParamountABA. Upon receipt of such request, ParamountABA will provide you with a list of disclosures made by ParamountABA in the prior six (6) years, not including certain types of disclosures such as, by way of example only, those made directly to you or pursuant to your written authorization.
- You have the right to obtain a paper copy of this Notice upon request.
To exercise any of these rights, please send written communication to ParamountABA at:
Attn: Compliance Officer
67 Thornridge Drive
Levittown, PA 19054
ParamountABA is required by law to notify you in the event that your child’s PHI is subject to a security breach unless ParamountABA reasonably determines, after fully investigating the situation and assessing the risk presented, that there is a low probability that the privacy or security of your child’s PHI has been compromised. You will be notified without unreasonable delay and in no event later than sixty (60) days following discovery of the security breach. Such notification will include information about the security breach, including steps that ParamountABA has taken to mitigate potential harm, and a contact person to whom you may address additional questions.
Questions, Comments, or Complaints
If you have any questions or comments about this Notice, or if you have any complaints about ParamountABA’s privacy practices, please contact the Compliance Officer at (215) 486-7346. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services. ParamountABA will not retaliate against you for filing a complaint.