Notice of Privacy Practices for Protected Health Information

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

This Notice of Privacy Practices (“Notice”) is provided to you as a requirement of the Health Insurance Portability and Accountability Act (“HIPAA”). We are required by law to follow the terms of this Notice and to maintain the privacy and security of your protected health information. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.

The law requires us to make sure that medical information that tells who you are is kept private. It also requires us to give you this Notice of our legal duties and privacy practices to tell you what we do with the medical information about you. To better understand this law, you may want to read it. It is in
45 CFR part 164.

We reserve the right to change the terms of this Notice at any time and to make the new Notice provisions effective for all protected health information that we maintain. The new Notice will be available upon request in our Facilities and on our website.

Who will follow this notice
LCMC Health is a health system operating as an Organized Health Care Arrangement (“OHCA”). This Notice describes the privacy practices of LCMC Health and its affiliated entities and facilities. LCMC Health entities (each, a “Facility”) include, but are not limited to: Children’s Hospital, Touro Infirmary, University Medical Center New Orleans, New Orleans East Hospital, West Jefferson Medical Center and LCMC Health Anesthesia Corp., East Jefferson Medical Center, LCMC Health Emergency Care (Downtown), Lakeside Hospital, Lakeview Hospital, and each Facility’s subsidiaries and affiliates and all associated clinics, facilities, and other service delivery sites.

All LCMC Health entities and Facilities participate in the OHCA and follow this same Notice. All of the entities and Facilities participating in the OHCA may share your medical information with each other for treatment, payment, or healthcare operation relating to the OHCA, and as otherwise permitted by applicable law. This list may not reflect recent acquisitions or sales of entities, sites, or locations. This Notice additionally applies to all employees, volunteers, students, and healthcare providers of any LCMC Health affiliated Facility or entity.

Other uses and disclosures
We typically use or disclose your medical information in the following ways. These descriptions do not list every permitted use or disclosure in each category.

To provide patient care to you. Your medical information may be used or shared by the doctors, nurses, technicians, residents, medical students, or other personnel who are involved in taking care of you. Different departments of the hospital, as well as the different entities, may also share medical information about you in order to coordinate the different things you may need, such as prescriptions, lab work, X-rays, and follow-up care. We may disclose medical information about you to people and entities outside the hospital who may be involved in your ongoing medical care. For example, a doctor treating you for an injury may ask another doctor about your overall health condition.

To obtain payment. Your medical information may be used or shared to prepare your bill, collect, and process payments from you as well as from any insurance company, government program (Medicare, Medicaid, Worker’s Comp., etc.), or other person who is responsible for payment. For example, we give information about you to your health insurance plan so it will pay for services.

For our Healthcare Operations. Your medical information may be used or shared to run our organization, review the quality and appropriateness of the care you receive, and contact you when necessary. For example, we use health information about you to manage your treatment and services. We may also use or share your healthcare information to perform healthcare operations on behalf of the organized healthcare arrangement described above.

To create de-identified databases. We may use your health information to create “de-identified” information in accordance with applicable law. After removing information that tells anyone who you are, your de-identified limited medical information may be put into a computer program which may be used for research purposes. If your information is partially de-identified, it is called a “limited data set,” and may be used for similar research purposes in accordance with applicable law and regulations.

Other ways we may use or disclose your information.
In addition to using or sharing your medical information for our own treatment, payment, and healthcare operations as described above, we may use or share your information as follows:

As required by law. We will disclose health information about you if we are required to do so by federal or state law.

People to whom you ask us to give It. If you tell us that you want us to give your medical information to someone, we will do so. You will need to fill out an authorization form which gives us permission to release your medical information. You may stop this authorization at any time. We are not allowed to force you to give us permission to give your medical information to anyone. We cannot refuse to treat you because you stop this authorization.

Health Information Exchanges. LCMC Health participates in Health Information Exchanges (HIE), which are electronic systems through which LCMC Health, and other participating healthcare providers, can share patient information according to nationally recognized standards and in compliance with federal and state laws that protect your privacy. Through HIEs, your LCMC Health providers will be able to access records held outside of LCMC necessary for your treatment, unless you choose to have your information withheld from the HIE by opting out of participation. If you choose to opt out of the HIE, LCMC will continue to use your health information in accordance with this Notice of Privacy Practices and the law but will not make your information available to others through the HIE. To opt out of the HIE, please contact the LCMC Health Information Management Department via phone at 1.844.324.6205 or via email at HIMDataIntegrityDepartment@lcmchealth.org and complete the opt out form. If you choose to opt out of the exchanges, your information will be excluded from all exchanges in which LCMC participates.

Fundraising activities. We, or our institutionally related foundations, may use or disclose your information to contact you for fundraising activities. If you do not want to be contacted for fundraising efforts, you have the right to opt-out of such communications. To be removed from a fundraising list, please contact the LCMC Health Compliance Department at 504.896.3030 or at compliance@lcmchealth.org.

Business associates. Business associates are companies or people we contract with to do certain work for us. Examples include providing information to a copying service we use when making copies of your health record, or an auditor who may review hospital bills for appropriate charging processes. To protect your health information, we require the business associate to appropriately safeguard your information.

Limited data set recipients. If we use your information to make a limited data set, we may give the limited data set that includes your information to others for the purpose of research, public health action or health care operations. The persons who receive the “limited data set” are required to agree to take reasonable steps to protect the privacy of your medical information.

The Secretary of the United States Department of Health & Human Services. The Secretary, or designee, has the right to see your information in order to make sure we follow the law.

Public health authorities. We may disclose your medical information to a public health authority responsible for preventing or controlling disease, maintaining vital statistics or other public health functions. We may also give your medical information to the Food and Drug Administration in connection with FDA-regulated products.

Health oversight activities. We may give your medical information to agencies responsible for health oversight activities, such as investigations and audits of the health care system or benefits programs, as allowed by law.

Public health and safety. We can share information about you for certain situations such as preventing disease, helping with product recalls, reporting adverse reactions to medication, reporting suspected abuse, neglect or domestic violence, or preventing or reducing a serious threat to anyone’s health or safety.

Workers’ compensation. We can use or share health information about you for workers’ compensation claims.

Law enforcement officers. We may share your medical information in response to certain law enforcement requests, including:

• in response to a court order, subpoena, warrant, summons, or similar process;
• to help identify or locate a suspect, fugitive, material witness or missing person;
• in response to inquiries as to the victim of a crime if, under certain circumstances, we are unable to obtain the person’s agreement;
• in response to inquiries regarding a death we believe may be the result of criminal conduct;
• in response to inquiries regarding criminal conduct at a Facility;
• in emergency situations to report a crime, the location of the crime or victims, or the identity, description or location of the person who committed the crime.

Courts and administrative agencies. We may share health information about you in response to a court or administrative order, or in response to a subpoena.

Coroners. We may share medical information about persons who have died to coroners, medical examiners, or funeral directors, as allowed by law.

Organ transplant services. We may share your medical information with organ procurement organizations.

Research. We may use or share your medical information in connection with certain research activities after going through a special approval process for that research.

Correctional institutions. We may share medical information about you with a correctional institution or law enforcement official if you are an inmate of a correctional institution or in the custody of a law enforcement official. This release would be necessary for: (1) the institution to provide you with health care; (2) to protect your health and safety or the health and safety of others; or (3) for the safety and security of the correctional institution.

Incidental disclosures. Your information may be used or disclosed incidental to a permitted use or disclosure. An example of an incidental disclosure is calling your name in a waiting area for an appointment where others in the waiting area may hear your name called. We will make reasonable efforts to limit these incidental uses and disclosures of your protected health information.

Specialized governmental functions. We may share your medical information for certain specialized governmental functions, as allowed by law. Such functions include:

• Military and veteran activities;
• National security and intelligence activities;
• Protective service to the President and others;
• Medical suitability determinations;
• Correctional institutions;
• Other law enforcement custodial situations.

Special categories of information. In some circumstances, your medical information may be restricted in a way that limits some of the uses and disclosures described in this Notice. For example, there are special restrictions on the use or disclosure of certain categories of information, e.g. tests for HIV, treatment for mental health conditions, or alcohol or drug abuse related treatment information.

Objections to use and release/disclosure
In certain situations, you have the right to object before your medical information can be used or released. This may not apply if you are being treated for certain mental or behavioral problems. If you do not object after you are given the chance to do so, your medical information may be used in the following ways:

Patient directory. Your name, room number and general information about your condition may be given to people who ask for you by name. Also, information about your religion may be given to members of the clergy, even if they do not ask for you by name.

Family and friends. We may release to your family members, other relatives, and close personal friends, any medical information that they need to know if they are involved in caring for you. For example, we can tell someone who is assisting with your care that you need to take your medication or get a prescription refilled or give them information on how to care for you. We can also use your medical information to find a family member, a personal representative, or another person responsible for your care and to notify them where you are, about your condition, or of your death. If it is an emergency, or you are not able to communicate, we may still give certain information to a person who can help with your care.

Disaster relief. We may share your medical information with a public or private disaster relief organization assisting with a disaster or emergency.

Other use of your medical information
Other uses and disclosures of your medical information not covered by this Notice, or required by law, will be made only with your written permission. In the following cases we will never share your information unless you give us written permission: (1) marketing purposes, (2) sale of your information, and (3) Sharing of psychotherapy notes. If you provide us with permission to use or disclose such medical information about you, you may revoke that permission, in writing, at any time. If you revoke your permission, this will stop any further use or release of such medical information for the purposes covered by your written authorization, except if we have already acted in reliance on
your permission.

Your rights regrading your medical information
You also have the following rights regarding your medical information:

Right to obtain an electronic or paper copy of your medical record. You can ask to see or get an electronic or paper copy of your medical record we have about you. All requests must be
in writing. Ask us how to do this. We will provide a copy or summary of your health information, usually within 30 days of your request. We may charge a reasonable, cost-based fee.

Right to request restrictions. You can ask us not to share certain health information for treatment, payment, or our operations. We are not required to agree to your request and may say “no” if it would affect your care. If you pay for a service or healthcare item out-of-pocket in full, you can ask us not to share information for purpose of payment or our operations with your health insurer. We will say “yes” to such a request unless a law requires us to share that information.

Right to request confidential communications. You have the right to ask us to contact you in a specific way (for example, home or office phone) or to send mail to a different address. We will say “yes” to all reasonable requests. Ask us how to do this.

Right to amend. If you feel that the medical information we have about you is incorrect or incomplete, you may ask us to amend the information. Ask us how to do this. We may say “no”
to your request, but we will tell you why in writing within 60 days.

Right to an accounting of releases/ disclosures. You can ask for a list (accounting) of the times we have shared your health information for six years prior to the date you ask, with whom
we shared it, and why.

We will include all the disclosures except for those about treatment, payment, and healthcare operations, and certain other disclosures (such as any you asked us to make). We will provide one accounting per year for free but will charge a reasonable, cost based fee if you ask for another one
within 12 months.

Right to receive a paper copy of this Notice. You can ask for a paper copy of this Notice at any time, even if you have agreed to receive the Notice electronically. We will provide you with a paper copy promptly. To obtain a paper copy of this Notice, contact the LCMC Health Compliance Department or pick one up from the Patient Access –Registration Area of one of our Facilities.

Right to file a complaint. You have the right to file a complaint with us or to the United States Department of Health & Human Services Office of Civil Rights if you believe that we have violated your privacy rights. To complain to us, please contact the LCMC Compliance Department at the
phone number listed below, or in writing to the following address:

LCMC Chief Compliance Officer
1100 Poydras, Suite 2500
New Orleans, LA 70063
504.896.3030
or email: Compliance@lcmchealth.org

You will not be penalized or otherwise retaliated against for filing a complaint.

Right to choose someone to act for you. If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will make sure this person has this authority and can act for you before we take action.

This Notice is effective January 23, 2024