Privacy Policy
NOTICE OF PRIVACY PRACTICES
This notice describes how medical information about you may be used and disclosed and how you can access this information. Please review it carefully.
Raff and Hall Pharmacy is required by law to maintain the privacy of Protected Health Information (PHI) and provide you with a notice of our legal duties and privacy practices.
References to “Raff and Hall Pharmacy,” “we,” “us,” and “our” include Raff and Hall Pharmacy and the members of its affiliated covered entity.
An affiliated covered entity is a group of organizations under common ownership or control, designating themselves as a single entity for HIPAA compliance purposes.
Raff and Hall Pharmacy, its employees, workforce members, and affiliated entity members involved in providing and coordinating health care are bound by the terms of this notice.
Members of Raff and Hall Pharmacy‘s affiliated covered entity share PHI for treatment, payment, and health care operations, as permitted by HIPAA and this notice.
PHI refers to information that identifies you and relates to your physical or mental health, the provision of health care products and services, or payment for services.
This notice explains how we may use and disclose your PHI and your rights regarding it. We are required by HIPAA to provide this notice to you.
How We May Use and Disclose Your PHI
Treatment
We may use and disclose PHI to provide and coordinate the treatment, medications, and services you receive. This includes sharing PHI with pharmacists, doctors, hospitals, and other health care providers.
Payment
PHI may be used and disclosed to obtain payment for the health care products and services provided. For example, we may contact your insurer
or third-party payor for payment purposes.Health Care Operations
We may use and disclose PHI for activities necessary to operate our business, such as monitoring staff performance, improving the quality of
services, and analyzing data for better health outcomes.Business Associates
We may share PHI with third-party service providers, referred to as Business Associates, who assist in services like billing or consulting.
Communication with Individuals Involved in Your Care
We may disclose PHI to family members, friends, or personal representatives involved in your care or payment for care.
FDA
PHI may be disclosed to the FDA for adverse event reporting, product recalls, and other safety-related purposes.
Worker’s Compensation
PHI may be disclosed to worker’s compensation or similar programs as required by law.
Public Health
We may disclose PHI to public health authorities to control disease, injury, or disability.
Law Enforcement
PHI may be disclosed for law enforcement purposes as required by law, including in response to subpoenas or court orders.
Health Oversight Activities
PHI may be disclosed to oversight agencies for audits, inspections, and other activities related to licensure and compliance.
Judicial and Administrative Proceedings
PHI may be disclosed in response to a court order or lawful requests related to legal disputes.
Research
PHI may be used or disclosed for research purposes when authorized by law.
Coroners, Medical Examiners, and Funeral Directors
PHI may be disclosed to these entities to carry out their duties.
Organ or Tissue Procurement
PHI may be disclosed to facilitate organ or tissue donation.
Notification
PHI may be used to notify family or others responsible for your care of your location and general condition.
Disaster Relief
PHI may be used or disclosed for disaster relief purposes.
Fundraising
PHI may be used for fundraising purposes unless you opt out.
Correctional Institutions
PHI may be disclosed to correctional institutions for health and safety reasons.
Military and National Security
PHI may be disclosed for military or national security purposes as authorized by law.
Uses and Disclosures Requiring Authorization
Psychotherapy Notes, Marketing, and Sale of PHI
Your written authorization is required for these specific uses and disclosures.
Other Uses and Disclosures
Any other use or disclosure not covered by this notice will require your written authorization.
Your Health Information Rights
Right to Request Restrictions
You can request restrictions on certain uses and disclosures of your PHI.
Right to Access and Copy PHI
You have the right to inspect and obtain a copy of your PHI.
Right to Request Amendments
You may request amendments to your PHI if it is incomplete or incorrect.
Right to an Accounting of Disclosures
You can request a list of disclosures of your PHI.
Right to Confidential Communications
You may request that we communicate with you by alternative means or at alternative locations.
Right to Be Notified of a Breach
You have the right to be notified if there is a breach of your unsecured PHI.
Where to Submit Requests
Forms for submitting requests can be obtained by contacting the Privacy Office at Raff and Hall Pharmacy.
For More Information or to Report a Problem
For further details or to report a privacy concern, contact Raff and Hall Pharmacy at the provided address or toll-free at (806) 744-8477.
Model Notices of Privacy Practices
The HIPAA Privacy Rule requires health plans and covered health care providers to develop and distribute a notice that provides a clear, user friendly explanation of individuals rights with respect to their personal health information and the privacy practices of health plans and health care providers. This page provides options for meeting the requirement to create notices of privacy practices (NPP).
HHS developed the model NPPs you see on this site to help improve patient experience and understanding. These models use plain language and approachable designs.
The options below are separated into two sets, for health plans and health care providers. Each set contains three formatted options and a text only option, in both English and Spanish. They are:
- Notice in the form of a booklet (preferred by consumers in focus testing);
- A layered notice that presents a summary of the information on the first page, followed by the full content on the following pages;
- A notice with the design elements found in the booklet, but formatted for full page presentation.
- A text only version of the notice.
The models reflect the regulatory changes of the Omnibus Rule (2013). In particular, the models highlight the new patient right to access their electronic information held in an electronic health record, if their provider has an EHR in their practice. Covered entities may use these models by entering their specific information. Please review Questions and Instructions documents before personalizing the notice.
For more information about the HIPAA Privacy Rule and the Notice requirements, see: http://www.hhs.gov/ocr/privacy/hipaa/understanding/coveredentities/notice.html
Instructions –
- Health Plan Instructions – PDF
- HC Provider Instructions – PDF
- Questions and Instructions for using the Model Notices – PDF
NPP Provider Files –
English
- NPP Booklet – HC Provider – PDF
- NPP Layered – HC Provider – PDF
- NPP Full Page – HC Provider – PDF
- NPP HC Provider – Text Version
Spanish
- NPP Booklet – HC Provider – PDF
- NPP Layered – HC Provider – PDF
- NPP Full Page – HC Provider – PDF
- NPP HC Provider – Text Version
NPP Health Plan Files –
English
- NPP Booklet – Health Plan – PDF
- NPP Full Page – Health Plan – PDF
- NPP Layered – Health Plan – PDF
- NPP Health Plan – Text Version
Spanish
- NPP Booklet – Health Plan – PDF
- NPP Full Page – Health Plan – PDF
- NPP Layered – Health Plan – PDF
- NPP Health Plan – Text Version
- A covered entity must make its notice available to any person who asks for it.
- A covered entity must prominently post and make available its notice on any web site it maintains that provides information about its customer services or benefits.
The Office for Civil Rights and Office of the National Coordinator for Health Information Technology collaborated to develop these model Notices of Privacy Practices.
Covered entities that are subject to both the HIPAA Privacy Rule and Section 1557 of the Affordable Care Act (ACA) should visit the FAQs at http://www.hhs.gov/civil-rights/for-individuals/section-1557/1557faqs/index.html for more information about providing taglines, which alert individuals with limited English proficiency (LEP) to the availability of language assistance services, and notices of nondiscrimination on entities’ Notices of Privacy Practices. OCR provides more information about Section 1557 and makes available translated resources for use by covered entities at:http://www.hhs.gov/civil-rights/for-individuals/section-1557.
Revised February 2014Model Notices of Privacy Practices