Patient and Web Site User Privacy Rights

Patients Privacy Rights

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Northwestern Medical Faculty Foundation (“NMFF”, “we” or “us”) is committed to respecting the privacy and confidentiality of your health information. In addition, the Health Insurance Portability and Accountability Act (HIPAA) requires us to maintain the privacy of your health information. We are also required to give you this notice that explains NMFF’s privacy practices and legal duties related to your health information, as well as your rights with regard to your health information. This notice describes the practices of all health care professionals allowed to enter information into your health care records at NMFF, all NMFF workforce, and any volunteers we allow to help you while you are at NMFF.

YOUR RIGHTS WITH RESPECT TO YOUR HEALTH INFORMATION AND HOW TO EXERCISE THEM

NNMFF seeks to not only provide quality care, but also to make your overall experience here at NMFF ideal. We strive to accommodate patient needs and requests— including needs and requests with respect to your health information. Specifically, you have the right to:

View and receive a copy of your health information (with some limited exceptions) held by NMFF.
Have your health information amended if you believe that it is wrong or if information is missing, and NMFF agrees. If NMFF disagrees, you may have a statement of your disagreement added to your health information.
Obtain a listing of those getting your health information from NMFF. The listing will not cover uses and disclosures made to you; for payment, treatment or health care operations; pursuant to an authorization; incidentally; for uses and disclosures for which you have the right to object (and you did not object); for national security purposes; to corrections or law enforcement personnel; or as part of a limited data set.
Ask NMFF to communicate with you in a different manner or at a different place (for example, by sending materials to a P.O. box instead of your home address). NMFF must accommodate reasonable requests.
Request NMFF to limit how your health information is used and disclosed for treatment, payment, or health care operations or for uses or disclosures for which you have the right to object (discussed below). It is your responsibility to make such requests. However, NMFF may not be able to facilitate your request. Even if we do, we may still use or disclose the information for your emergency treatment.
Get a separate paper copy of this Notice even if you agreed to receive this Notice by e-mail.

To accomplish any of the above items, contact the Patient Services Center, 1st Floor, Galter Pavilion, 312-695-1920 (TDD: 312-695-3661). For tracking purposes, you may have to complete a form and submit your request in writing.

HOW NMFF MAY USE AND SHARE YOUR HEALTH INFORMATION

We use your health information within NMFF. We share or disclose your health information to others outside NMFF for many different reasons. This Notice explains the ways we use and disclose your health information. It will also advise you when we need to get your specific permission or authorization to use or disclose your information. With some exceptions, we use or disclose only portions of your health information that are necessary to satisfy the need for which the information is being used or disclosed.

Those Instances that Require the Use or Disclosure of Your Health Information

NMFF must use and disclose your health information:

to you or someone who has the legal right to act for you (your personal representative);
to the Secretary of the Department of Health and Human Services, if necessary, to make sure your privacy is protected; and
when required by law.

The Use and Disclosure of Your Health Information for Treatment, Payment, and Health Care Operations

NMFF is allowed to use and disclose your health information without your authorization for treatment, payment, and health care operations.

Treatment. NMFF will use and disclose your health information to provide, coordinate or manage your health care and related services. For example, your NMFF primary care doctor may refer you to a NMFF specialist such as a radiologist or surgeon. In doing so, the primary care doctor will likely share information about you with the specialist. In some instances, NMFF may ask that you give us written permission to share your health information with other providers. The reason for this request is to verify that the other doctor is a provider of your care and, thus, should receive your health information. NMFF may also use your health information to provide appointment reminders or give you information about treatment alternatives, or other health care services or benefits that may be of interest to you.
Payment. NMFF will use and disclose your health information to bill and collect payment for the health care services it provides to you. For example, if you have health insurance, NMFF may disclose your health information to the insurance company to receive payment.
Health Care Operations.NMFF may use and disclose your health information to carry out “health care operations.” These are activities that are needed to operate NMFF facilities and carry out its mission. They include, for example:

Conducting quality assessment and improvement activities.
Reviewing the qualifications and performance of health care providers, training, and performing accreditation, certification, or licensing activities.
Conducting or arranging for medical review, legal services, and auditing functions, including fraud and abuse detection and compliance programs.
Managing NMFF business and performing general administrative activities..

Other Purposes for which NMFF is Allowed to Use or Disclose Your Health Information

NMFF may use and disclose your health information to you or your personal representative. In addition, NMFF may use or disclose your health information to others without your authorization as listed below. NMFF must comply with various legal requirements in order to do so.

For judicial or administrative proceedings (such as in response to court order).
For law enforcement purposes (such as providing limited information to locate a missing person).
For public health activities (such as reporting specific diseases or outbreaks).
Report to appropriate authorities incidents of abuse, neglect or domestic violence.
For government health oversight activities (such as fraud and abuse investigations).
To facilitate organ and tissue donation.
To coroners, medical examiners and funeral directors.
For research studies that meet all privacy law requirements (such as research related to the prevention of disease or disability).
To avoid a serious and imminent threat to health or safety.
For specific government functions (such as disclosing health information for national security purposes, including protecting the President of the United States or conducting intelligence operations).
For workers’ compensation purposes.
To create a collection of de-identified information that can no longer be traced back to you.

NMFF is allowed to disclose your health information to its “business associates”---individuals or companies that provide services to NMFF. For example, this would include the company that administers the billing claims for NMFF, software vendors, and other service providers. NMFF requires that all business associates appropriately safeguard your information.

NMFF may also make your health information available to another individual or entity in what is known as a “limited data set” for purposes of research, public health and health care operations. A limited data set is protected health information that excludes direct identifiers of you or your relatives, employers, or household members. NMFF requires that the recipient appropriately safeguard your information as well.

NMFF may use your demographic information (e.g., name, address, phone number) and the dates you received services at NMFF and disclose that information to either our business associate or certain affiliated entities for our fundraising purposes. for example, in order to provide expanded programs in specialty areas we may want to raise additional money and, therefore, may contact you for a donation. If you do not want to be contacted, please contact the patient Services Center at 312-695-1920 (TDD: 312-695-3661).

Finally, NMFF may use or disclose your health information incidentally as part of another use or disclosure that is permitted under law.

Uses and Disclosures for Which You Have the Opportunity to Object

Unless you object, NMFF may share relevant health information about you with a family member or other person close to you if they are involved in your care or payment for your care. NMFF may use or share your health information to notify a family member or other person responsible for you of your location, general medical condition or death.

NMFF also may use or share your health information with a public or private agency assisting in disaster relief. This is to coordinate efforts to notify someone on your behalf. If we can reasonably do so while trying to respond to the emergency, we will try to find out if you do want us to share this information and abide by your wishes.

Uses and Disclosures of Information for Marketing

We will need your written authorization to use and disclose your health information for marketing purposes. “Marketing” includes communication about a product or service that encourages you to purchase or use the product or service. Marketing does not include NMFF’s describing a health-related product or service that NMFF provides, or recommending alternative treatments, therapies, health care providers, or settings of care. NMFF may also conduct marketing without your authorization if the marketing is face-to-face or if it involves a promotional gift of nominal value.

Uses and Disclosures of Information that Require Your Written Permission (Authorization)

Uses and disclosures of your health information for purposes other than those referred to in this Notice will be made only with your written authorization. If you choose to sign an authorization to disclose your health information, you can later take back (revoke) that authorization to stop any future uses and disclosures. However, it will not stop any uses or disclosures that NMFF has already acted upon before you took back your authorization. Your revocation must be in writing..

Additional State and Federal Requirements

Some Illinois and federal laws provide additional privacy protection of your health information. These include:

Sensitive Information. Some types of health information are particularly sensitive, and the law, with limited exceptions, may require that we obtain your written permission or in some instances, a court order, to use or disclose that information. Sensitive health information includes information dealing with genetics, HIV/AIDS, mental health (including psychotherapy notes), alcohol and substance abuse, artificial insemination, and sexual assault.
Information Used in Certain Disciplinary Proceedings. State law may require your written permission if certain health information is to be used in various review and disciplinary proceedings by state health oversight boards (e.g., the Department of Professional and Regulation).
Information Used in Certain Litigation Proceedings. State law may require your written permission for certain providers to disclose information in certain legal proceedings.
Disclosures to Certain Registries.Some laws require your written permission if we disclosure your health information to certain statesponsored registries.

NMFF is committed to following all state and federal legal requirements.

OUR DUTIES WITH RESPECT TO YOUR HEALTH INFORMATION

NMFF must abide by the terms of this Notice as long as it is in effect. NMFF reserves the right to change its privacy practices and the terms of this Notice at any time. Changes will apply to the protected health information currently residing in NMFF. Any updated Notice will be posted on the NMFF web site and in all NMFF operational practice areas for public viewing. You may pick up a copy at our offices or request a copy of the current Notice by calling the person listed below. You may also view it on our web site at www.nmff.org.

WHAT TO DO IF YOU BELIEVE NMFF HAS VIOLATED YOUR PRIVACY RIGHTS

If you believe that we may have violated your privacy rights or you disagree with any action we have taken with regard to your health information, you may file a complaint with NMFF or the Office of Civil Rights of the Department of Health and Human Services. The person listed below will provide you with the necessary assistance and paperwork. No retaliatory action will be taken.

PERSON TO CONTACT FOR INFORMATION OR WITH A COMPLAINT

If you have any questions about this Notice or any complaints, please contact the Patient Services Center at 312-695-1920 (TDD: 312-695-3661).

EFFECTIVE DATE OF THIS NOTICE

This Notice is effective as of August 15, 2008.

Web Site Users Privacy Rights

Your privacy is important to Northwestern Medical Faculty Foundation. Therefore, we have created this privacy statement to describe what information we collect from our Web site and how it is used.

Our web server collects and stores the following general information when you visit the Foundation web site:

The date and time you access our web site;
The name of the domain from which you access the Internet (for example, aol.com, if you are connecting from an America Online account);
The pages you visit;
The Internet address of the web site from which you linked directly to us;
The name and release number of the web browser and platform you are using;
If you use robots, spiders, or crawlers to copy our site, we will track such activity.

This information is collected in the aggregate and will be used by us to improve our Web site and make it more useful to you. It is NOT linked to your personal identity.

If you choose to use the "Request an Appointment", "Contact Us", or "Site Feedback" forms on our web site and identify yourself, you should be aware that these forms are not encrypted and that the possibility exists that unauthorized individuals may intercept the messages. If your communication is very sensitive, or includes information like your diagnosis or medical history, you may want to use the telephone for these purposes instead. You acknowledge and accept the risk of sending this information by e-mail or the Internet and agree not to hold the Foundation or any of its affiliates, employees or agents liable for any damages you may incur as a result of the use or transmittal of this information for the purposes stated herein.

If you use the "Contact Us" or "Site Feedback" forms, we will use that information to improve our services, unless you request that we contact you and you provide us with contact information. We will not disclose the information that you provide us to any outside organization except as required by law.

Occasionally, we provide links to other useful web sites outside the Foundation web site. We cannot be responsible for the content or privacy practices used by other web site owners.

We reserve the right to change or modify this policy statement at any time. We will post any changes to our privacy policy in this section of our web site so that our site visitors are always aware of what information we collect and how we use it.

If you are a patient with access to My Northwestern Care, please note that your use of My Northwestern Care is also governed by the My Northwestern Care Terms and Conditions of Use and Privacy Policy. You can review the most current version of the My Northwestern Care Terms and Conditions of Use and Privacy Policy at any time by clicking here. The Foundation does not disclose your Personal Information to third parties, except as follows:

The Foundation may disclose Personal Information if it buys or sells business assets or is acquired by or acquire other companies. In such transactions, Personal Information generally is one of the transferred business assets;
The Foundation may also disclose Personal Information if it is required to do so by law;
The Foundation may also use third party suppliers and service providers to facilitate our services, and they may have access to Personal Information. For example, one or more aspects of this site may be outsourced to a supplier or service provider who performs services according to our requirements;

Please remember that, although we endeavor to select only reputable companies who share our commitment to customer privacy, we are in no way responsible for the actions or policies of these other organizations. The use of cookies enables us to enhance your visits to our site. Cookies are alphanumeric identifiers that are transferred to your computer's hard drive through your web browser. Cookies enable us to recognize your browser and provide features that are tailored to your needs. The Foundation may use information from cookies for purposes of planning and tracking, as well as assessing the technical function of our site. The Foundation may also use cookies to track information about which pages you visit within the Site to help us gauge the effectiveness of the site or our content.

- Patient Guide -

- Personal Health Record -