ALLERGY & CLINICAL IMMUNOLOGY

MEDICAL GROUP

HEALTH INFORMATION PRIVACY
POLICIES & PROCEDURES

These Health Information Privacy Policies & Procedures implement our obligations to protect the privacy of individually identifiable health information that we create, receive, or maintain as a healthcare provider.

We implement these Health Information Privacy Policies and Procedures as a matter of sound business practice; to protect the interests of our patients; and to fulfill our legal obligations under the Health Insurance Portability and Accountability Act of 1996 ('HIPAA'), its implementing regulations at 45 CFR Parts 160 and 164 ('Privacy Rules') and State law to the extent that it provides greater protection or rights to patients than the Privacy Rules.

Members of our workforce, as well as our Business Associates are obligated to follow theseHealth Information Privacy Policies & Procedures faithfully. Failure to do so can result in disciplinary action, including termination of employment or affiliation with us.

These Policies & Procedures address the basics of HIPAA Privacy Rules that apply in our medical practice. They do not purport to cover everything in the Privacy Rules. The Policies & Procedures sometimes refer to forms we use to help implement the policies and to the Privacy Rules themselves when added detail may be needed.

Please note that while the Privacy Rules speak in terms of 'individual' rights and actions, these Policies & Procedures use the more familiar word 'patient' instead; 'patient' should be read broadly to include prospective patients, patients of record, former patients, their authorized representatives, and any other 'individuals' contemplated in the Privacy Rules.