● LEGAL & COMPLIANCE
Effective Date: January 1, 2025 | Last Updated: July 1, 2025
HealthCare Comp is committed to maintaining the privacy of your Protected Health Information (PHI). As a covered entity or business associate under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and its implementing regulations, we are required by law to maintain the privacy of PHI, to provide you with notice of our legal duties and privacy practices with respect to PHI, and to notify affected individuals following a breach of unsecured PHI.
We may use and disclose your PHI for the following purposes without your written authorization:
We may use and disclose PHI to provide, coordinate, or manage your health care and related services. For example, we may disclose PHI to physicians, therapists, equipment suppliers, and other healthcare providers involved in your care.
We may use and disclose PHI to obtain payment for services provided to you. For example, we may disclose PHI to your workers' compensation insurance carrier or third-party administrator to obtain reimbursement for services rendered.
We may use and disclose PHI for our internal operations, including quality assessment and improvement activities, training, audits, compliance activities, and general business management functions.
We may disclose PHI as authorized by, and to the extent necessary to comply with, state workers' compensation laws that provide benefits for work-related injuries or illnesses.
We may disclose PHI when required to do so by federal, state, or local law, including to public health authorities, law enforcement, or in response to a court order or subpoena.
We may share PHI with third-party "business associates" who perform services on our behalf, provided that we have obtained satisfactory written assurance (a Business Associate Agreement) that they will safeguard the information.
For uses and disclosures of PHI not described above, we will obtain your written authorization before using or disclosing PHI, including:
You may revoke an authorization at any time in writing, except to the extent we have already taken action in reliance on it.
You have the right to inspect and obtain a copy of your PHI that we maintain in a designated record set. We may charge a reasonable, cost-based fee for copies.
You have the right to request that we amend PHI that you believe is incorrect or incomplete. We may deny the request under certain circumstances and will provide a written explanation if we do so.
You have the right to request a list of disclosures of your PHI made by us for purposes other than treatment, payment, or healthcare operations during the six (6) years prior to your request.
You have the right to request restrictions on how we use or disclose your PHI. We are not required to agree to most restrictions, but we will comply with any restriction we do agree to.
You have the right to request that we communicate with you about your PHI in a certain way or at a certain location. We will accommodate reasonable requests.
You have the right to obtain a paper copy of this Notice upon request, even if you have agreed to receive it electronically.
We are required by law to:
We reserve the right to change this Notice and our privacy practices at any time. Any revised Notice will apply to PHI we already have about you as well as any information we receive in the future. We will post the current Notice on our website and make copies available upon request.
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services Office for Civil Rights. To file a complaint with us, contact our Privacy Officer using the information below. We will not retaliate against you for filing a complaint.
For complaints to HHS: www.hhs.gov/hipaa/filing-a-complaint
