Practice Policies
Notice of Privacy Practices
PRIVACY NOTICE
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.
This Privacy Notice is being provided to you as required by federal and Florida law, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA) and Florida Statutes (e.g., § 456.057). It describes how we may use and disclose your protected health information (PHI) to carry out treatment, payment, or health care operations and for other purposes permitted or required by law. It also describes certain rights you have regarding your PHI. “Protected health information” is any written or oral health information about you—including demographic data—that can be used to identify you, is created or received by your health care provider, and relates to your past, present, or future physical or mental health or condition.
We abide by both federal HIPAA regulations and any applicable Florida privacy laws. Where Florida law grants you greater privacy rights or imposes stricter requirements than federal law, we will follow the more protective standards.
I. Uses and Disclosures of Protected Health Information
Spine and Nerve Center Riverview (SNCR) offices may use your PHI for purposes of providing treatment, obtaining payment for treatment, and conducting health care operations. PHI may be used or disclosed only for these purposes unless we obtain your authorization or an applicable law permits or requires the use or disclosure without such authorization. Disclosures for the purposes described in this Privacy Notice may be made in writing, orally, or by facsimile.
A. Treatment
We will use and disclose your PHI to provide, coordinate, or manage your health care and any related services. This includes coordination or management of your care with a third party. For example, we may disclose your PHI to a pharmacy to fill a prescription or to a laboratory to order a test. We may also disclose your PHI to outside providers who are treating you or consulting about your care.
B. Payment
Your PHI will be used, as needed, to obtain payment for services provided. This may include disclosures to your health insurance company to get prior approval for procedures or to determine whether a service is covered by your health plan. We may also disclose your PHI to another provider involved in your care for their payment activities (e.g., demographic information to anesthesia providers so they can be paid).
C. Operations
We may use or disclose your PHI, as needed, for our own health care operations. These operations include quality assessment, improvement activities, reviewing employee performance, training programs for students or practitioners, accreditation, certification, licensing or credentialing activities, audits, compliance reviews, legal services, and business management.
When appropriate, we may also disclose PHI to another provider or health plan for their health care operations.
D. Other Uses and Disclosures
In connection with treatment, payment, and operations, we may use or disclose your PHI for the following purposes without additional authorization:
- Appointment reminders (e.g., to remind you of your surgery date)
- Information about treatment alternatives or options
- Information about health-related benefits or services
- Contacting you to raise funds for the facility or an institutional foundation. You may opt out of fundraising communications by contacting our Privacy Officer.
II. Uses and Disclosures Beyond Treatment, Payment, and Health Care Operations Permitted Without Authorization or Opportunity to Object
Federal and Florida privacy rules allow us to use or disclose your PHI without your permission or authorization for certain reasons, including:
A. When Legally Required
We will disclose your PHI when required to do so by any federal, state, or local law.
B. When There Are Risks to Public Health
We may disclose your PHI for public health activities, such as preventing or controlling disease, reporting adverse events to the FDA, tracking product defects or recalls, and notifying individuals who may have been exposed to a communicable disease.
C. To Report Suspected Abuse, Neglect, or Domestic Violence
We may notify government authorities if we believe a patient is the victim of abuse, neglect, or domestic violence. We will make this disclosure as required or authorized by law.
D. Health Oversight Activities
We may disclose your PHI to oversight agencies (e.g., Florida Department of Health or other agencies) for audits, investigations, inspections, or disciplinary actions as permitted by law.
E. Judicial and Administrative Proceedings
We may disclose your PHI in response to a court or administrative order. We may also disclose your PHI in response to a subpoena if we receive certain assurances required by law.
F. Law Enforcement Purposes
We may disclose PHI for law enforcement purposes, such as to comply with reporting requirements for certain types of wounds, responding to a court-ordered warrant, locating a suspect or missing person, or reporting criminal activity if we believe in good faith that a crime has occurred on our premises.
G. Coroners, Funeral Directors, and Organ Donation
We may disclose PHI to coroners, medical examiners, or funeral directors to identify a deceased individual or determine the cause of death, and to facilitate organ or tissue donation.
H. Research
We may use or disclose your PHI for research approved by an institutional review board or privacy board that has reviewed the research proposal and privacy protocols.
I. Serious Threat to Health or Safety
We may disclose PHI if we believe in good faith that it is necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.
J. Specified Government Functions
In certain circumstances, federal regulations authorize use or disclosure of PHI to facilitate government functions related to military and veterans’ activities, national security, intelligence, protective services, and lawful custodial situations.
K. Worker’s Compensation
We may release your PHI to comply with worker’s compensation laws or similar programs.
III. Uses and Disclosures Permitted Without Authorization But With Opportunity to Object
We may disclose limited PHI to a family member or close personal friend directly involved in your care or payment for your care. We may also disclose limited PHI to help notify a family member about your location, condition, or death. You may object to these disclosures. If you do not object—or we infer from the circumstances that you do not object—we may disclose your PHI as described.
IV. Uses and Disclosures Which You Authorize
Other than as stated above, we will not disclose your PHI without your written authorization. You may revoke your authorization in writing at any time, except to the extent we have already relied on it.
V. Your Rights
You have the following rights regarding your PHI:
- Right to Inspect and Copy
You may inspect and obtain a copy of your PHI in a “designated record set” (medical and billing records, and other records used in decision-making). Under limited circumstances, we may deny your request, for example if it is likely to endanger someone’s safety. If denied, you can request a review of the decision. Submit your written request to our Privacy Officer; fees may apply for copying or mailing. - Right to Request Restrictions
You may ask us not to use or disclose certain parts of your PHI for treatment, payment, or health care operations, or to family and friends involved in your care. We are not required to agree to your restriction request, but if we do agree, we must abide by it except in an emergency. Requests must be submitted in writing to our Privacy Officer. - Right to Confidential Communications
You may request that we communicate with you in a specific way (e.g., only at work or via mail). We will accommodate reasonable requests. Submit your written request to our Privacy Officer. - Right to Request Amendments
You may request an amendment to your PHI if you believe it is inaccurate or incomplete. We may deny your request in certain circumstances (e.g., if we believe the records are correct). If denied, you may file a statement of disagreement. Submit written requests to our Privacy Officer, including the reason for amendment. - Right to an Accounting of Disclosures
You may request an accounting of certain disclosures made of your PHI (excluding disclosures for treatment, payment, operations, and some others). Accounting requests must be in writing to our Privacy Officer and may not exceed a six-year period. The first accounting in a 12-month period is free; subsequent requests may incur a fee. - Right to a Paper Copy of this Notice
You may request a paper copy of this Notice at any time, even if you receive it electronically.
VI. Our Duties
We are required by law to maintain the privacy of your PHI and to provide you with this Notice. We must abide by its terms as currently in effect. We reserve the right to change this Notice and make any new provisions effective for all PHI we maintain. If we change the Notice, you will receive a copy by mail or in person.
VII. Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the U.S. Department of Health and Human Services. To file a complaint with our facility, contact the Privacy Officer at the address or phone number listed below. We will not retaliate against you for filing a complaint.
Contact Person
All questions and requests regarding privacy and your rights under HIPAA and Florida law should be directed to our Privacy Officer:
Spine and Nerve Center Riverview
ATTN: Privacy Officer
13023 Summerfield Square Drive
Riverview, FL 33578
Phone: (813) 741-1071
IX. Effective Date
This Notice is effective February 1, 2025 and remains in effect until revised. Any revisions will be promptly shared with you in accordance with applicable law.
