HIPAA Compliance Notice

Our Commitment to Your Privacy

MG Home Care is committed to maintaining the privacy and confidentiality of your personal health information. This Notice of Privacy Practices describes how we may use and disclose your protected health information (PHI) to carry out treatment, payment, or health care operations, and for other purposes that are permitted or required by law.

What is Protected Health Information (PHI)?

Protected Health Information is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health or condition and related health care services.

How We May Use and Disclose Your Health Information

1. Treatment

We will use and disclose your health information to provide, coordinate, or manage your health care and any related services. This includes coordination or management of your health care with other health care providers.

Example: Your caregiver may share information about your care plan with your physician to ensure coordinated, comprehensive care.

2. Payment

We may use and disclose your health information to obtain payment for services we provide to you. This may include determining your eligibility for benefits, certifying that services were provided, and obtaining payment from insurance companies or other third parties.

Example: We may submit claims to your insurance company containing information about the services provided to you.

3. Health Care Operations

We may use and disclose your health information for health care operations purposes. These activities include quality assessment and improvement activities, business planning and development, and general administrative activities.

Example: We may use information about services provided to you to evaluate the performance of our caregivers and improve the quality of care we provide.

4. Other Permitted Uses and Disclosures

We may use or disclose your health information without your authorization in the following situations:

• As Required by Law: When required by federal, state, or local law
• Public Health Activities: To public health authorities for disease prevention and control
• Health Oversight Activities: To health oversight agencies for audits, investigations, and inspections
• Abuse or Neglect: To report suspected abuse, neglect, or domestic violence to authorities
• Legal Proceedings: In response to court orders, subpoenas, or other legal processes
• Law Enforcement: For law enforcement purposes as required by law
• Emergency Situations: To avert a serious threat to health or safety
• Workers' Compensation: For workers' compensation or similar programs

Your Rights Regarding Your Health Information

Right to Inspect and Copy

You have the right to inspect and obtain a copy of your health information that may be used to make decisions about your care. To inspect or copy your health information, you must submit a written request to our Privacy Officer. We may charge a reasonable fee for copying and mailing costs.

Right to Amend

If you believe that information in your record is incorrect or incomplete, you may request that we amend the information. You have the right to request an amendment for as long as the information is kept by or for our organization. To request an amendment, you must submit a written request to our Privacy Officer explaining why the information should be amended.

Right to an Accounting of Disclosures

You have the right to request an "accounting of disclosures," which is a list of certain disclosures we have made of your health information. To request this accounting, you must submit a written request to our Privacy Officer. Your request must state a time period, which may not be longer than six years.

Right to Request Restrictions

You have the right to request a restriction or limitation on the health information we use or disclose about you for treatment, payment, or health care operations. We are not required to agree to your request, but if we do, we will comply with your request unless the information is needed to provide you with emergency treatment.

Right to Request Confidential Communications

You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you may request that we only contact you at work or by mail. We will accommodate all reasonable requests.

Right to a Paper Copy of This Notice

You have the right to a paper copy of this notice at any time, even if you have agreed to receive it electronically. To obtain a paper copy, contact our Privacy Officer.

Right to be Notified of a Breach

You have the right to be notified in the event that we (or a Business Associate) discover a breach of unsecured protected health information.

Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health information
• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information
• We must follow the duties and privacy practices described in this notice and give you a copy of it
• We will not use or share your information other than as described here unless you tell us we can in writing
• If you tell us we can, you may change your mind at any time by letting us know in writing

Changes to This Notice

We reserve the right to change the terms of this notice and to make the new notice provisions effective for all protected health information that we maintain. If we make material changes to our privacy practices, we will post the revised notice in our office and on our website. You may also request a copy of our current notice at any time.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. To file a complaint with us, contact our Privacy Officer at the address below. All complaints must be submitted in writing. You will not be penalized or retaliated against for filing a complaint.

Additional Information

Security Measures

We implement appropriate physical, technical, and administrative safeguards to protect your protected health information from unauthorized access, use, or disclosure. These measures include:

• Secure storage of physical and electronic records
• Access controls and authentication procedures
• Encryption of electronic health information
• Regular security risk assessments and audits
• Training of all staff members on HIPAA requirements
• Business Associate Agreements with vendors who handle PHI

Minimum Necessary Standard

When using or disclosing protected health information or when requesting protected health information from another covered entity, we will make reasonable efforts to limit the information to the minimum necessary to accomplish the intended purpose of the use, disclosure, or request.

De-Identification of Information

We may use and disclose de-identified information (information that does not identify you and cannot be used to identify you) without restriction.

Questions

If you have any questions about this Notice or about our privacy practices, please contact our Privacy Officer using the contact information provided above.

Effective Date: January 1, 2024
Last Updated: January 1, 2024