Notice of Privacy Practices
Effective April 14, 2003. Revised September 23, 2013 (Omnibus Rule) and June 1, 2021. This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
Our commitment to your privacy
Cedarcrest Health is required by law to maintain the privacy of your protected health information (PHI), to provide you with this notice of our legal duties and privacy practices, and to abide by the terms of the notice currently in effect.
How we may use and disclose your health information
We may use and disclose your PHI, without your written authorization, for the following purposes:
- Treatment. To provide, coordinate and manage your care, including sharing information among physicians, nurses and other personnel involved in your care.
- Payment. To bill and collect payment from you, your insurance company or a third party.
- Health care operations. For quality assessment, staff education, licensing, accreditation and similar activities.
- As required by law, including public health reporting, abuse or neglect reporting, health oversight activities, judicial proceedings and law enforcement purposes as permitted by regulation.
Other uses and disclosures — including most uses of psychotherapy notes, marketing uses, and the sale of PHI — will be made only with your written authorization, which you may revoke at any time.
Your rights
- To inspect and receive a copy of your medical record (see Medical Records).
- To request an amendment of your record.
- To receive an accounting of certain disclosures.
- To request restrictions on certain uses and disclosures.
- To request confidential communications by alternative means or locations.
- To receive a paper copy of this notice on request.
- To be notified following a breach of unsecured PHI.
Complaints
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer at (814) 555-2095 or with the Secretary of the U.S. Department of Health and Human Services. You will not be penalized for filing a complaint.
Web site privacy
The public portions of cedarcresthealth.org do not require registration. Our web server records standard access logs (IP address, pages viewed, browser type) used for site operations. The MyCedarcrest patient portal requires sign-in and uses session cookies; portal activity is logged for security purposes.
Page last reviewed: 06/01/2021