Permitted Uses and Disclosures of PHI

We may use or disclose your PHI without your written authorization as follows:

1) Treatment

To provide, coordinate, or manage your care and pharmacy services (for example, contacting your prescriber about a prescription or counseling you on medication therapy).

2) Payment

To obtain payment for services (for example, submitting claims, verifying benefits, or determining eligibility and coverage with your health plan).

3) Healthcare Operations

For routine business activities such as quality assessment and improvement, staff training, licensing, accreditation, audits, and customer service.

4) As Required by Law

We will disclose PHI when required by federal, state, or local law, including to public health authorities, health oversight agencies, law enforcement, courts, and to avert serious threats to health or safety.

5) Other Uses and Disclosures

• Public Health Activities (e.g., adverse event reporting, product recalls, disease control).
• Abuse, Neglect, or Domestic Violence reporting as permitted by law.
• Health Oversight for inspections, investigations, or licensure.
• Judicial and Administrative Proceedings in response to a court or administrative order, or subpoena as permitted by law.
• Law Enforcement Purposes in limited circumstances (e.g., locating a suspect, witness, or missing person).
• Coroners, Medical Examiners, and Funeral Directors as necessary for their duties.
• Organ, Eye, or Tissue Donation organizations as permitted.
• Research under IRB/Privacy Board approval or with your authorization where required.
• Workers’ Compensation and similar programs as authorized by law.
• Specialized Government Functions (e.g., military, national security) as permitted.

All other uses and disclosures not described in this Notice will be made only with your written authorization. You may revoke an authorization at any time in writing, except to the extent we have already relied on it.

Your Rights Regarding PHI

• Right to Access – Request to inspect or obtain paper or electronic copies of your pharmacy records, subject to limited exceptions. Reasonable fees may apply as permitted by law.
• Right to Amend – Request a correction if you believe information is inaccurate or incomplete. We may deny requests in certain cases with a written explanation.
• Right to Request Restrictions – Ask us to limit use/disclosure of PHI. We are not required to agree, except we must comply with your request to restrict disclosures to a health plan regarding a service you (or someone on your behalf) paid for in full out-of-pocket, when the disclosure is solely for payment or operations.
• Right to Confidential Communications – Request that we contact you at alternative locations or by alternative means (e.g., mail to a different address).
• Right to an Accounting of Disclosures – Receive a list of certain disclosures we made of your PHI for up to six years prior to your request (excluding treatment, payment, operations, and disclosures you authorized).
• Right to a Paper Copy – Request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
• Right to Receive Breach Notification – Be notified following a breach of unsecured PHI as required by law.

To exercise these rights, contact our Privacy Officer using the information below. We will respond in accordance with applicable timelines.

Our Duties

• Maintain the privacy and security of your PHI and provide this Notice describing our legal duties and privacy practices.
• Follow the terms of the Notice currently in effect.
• Notify you promptly if a breach occurs that may have compromised your information.
• Limit uses/disclosures to the minimum necessary, when required, to accomplish the intended purpose.

We reserve the right to change the terms of this Notice. Changes will apply to PHI we already maintain. A current version will be posted in our pharmacy and on our website, showing the effective date at the top.

Questions &Requests

If you have questions about this Notice, wish to exercise your rights, or believe your privacy rights have been violated, contact us.