Notice of Privacy Information Practice

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

PLEASE REVIEW IT CAREFULLY.

A. General description and purpose of notice.

This notice describes our information privacy practices and that of:

Any health care professional authorized to enter information into your medical record created and/or maintained at Cypress Cove;
Any member of a volunteer group which we allow to help you while receiving services at Cypress Cove; and
All employees, staff, and other personnel of Cypress Cove.

All of the individuals or entities identified above will follow the terms of this notice. These individuals or entities may share your Protected Health Information (PHI) with each other for purposes of treatment, payment, or health care operations, as further described in this notice.

B. Cypress Cove’s policy regarding your Protected Health Information (PHI).

We are committed to preserving the privacy and confidentiality of your protected health information created and/or maintained at Cypress Cove. Certain state and federal laws and regulations require us to implement policies and procedures to safeguard the privacy of your protected health information.

This notice will provide you with information regarding our privacy practices and applies to all of your protected health information created and/or maintained at Cypress Cove, including any information that we receive from other health care providers or facilities. The notice describes the ways in which we may use or disclose your protected health information and also describes your rights and our obligations regarding any such uses or disclosures. We will abide by the terms of this notice, including any future revisions that we may make to the notice as required or authorized by law.

We reserve the right to change this notice and to make the revised or changed notice effective for protected health information we already have about you as well as any information we receive in the future. We will post a copy of the current notice in the mail room and wellness nurse office in independent living; on the resident portal and Cypress Cove website; and in the entrance lobby at The Inn and The Lodge and all parlors at The Cottage. The first page of the notice contains the effective date and any dates of revision.

C. Uses or disclosures of your Protected Health Information.

We may use or disclose your protected health information in one of following ways:

For purposes of treatment, payment or health care operations
Pursuant to your written authorization (for purposes other than treatment, payment or health care operations)
As permitted by law
As required by law

The following describes each of the different ways that we may use or disclose your protected health information. Where appropriate, we have included examples of the different types of uses or disclosures. While not every use or disclosure is listed, we have included all of the ways in which we may make such uses or disclosures.

Uses or disclosures for treatment, payment or health care operations.
We may use or disclose your protected health information for purposes of treatment, payment, or health care operations.

1. Treatment. We may use your protected health information to provide you with health care treatment and services. We may disclose your protected health information to doctors, nurses, nursing assistants, medication aides, technicians, medical and nursing students, rehabilitation therapy specialists, or other personnel who are involved in your health care. For example, your physician may order physical therapy services to improve your strength and walking abilities. Our nursing staff will need to talk with the physical therapist so that we can coordinate services and develop a plan of care. We also may disclose your protected health information to people outside of Cypress Cove who may be involved in your health care, such as family members, social services, hospice or home health agencies.
2. Appointment reminders. We may use or disclose your protected health information for purposes of contacting you to remind you of a health care appointment.
3. Treatment alternatives, health-related benefits and services. We may use or disclose your protected health information for purposes of contacting you to inform you of treatment alternatives or health-related benefits and services that may be of interest to you.
4. Cypress Cove Resident Directory. We may use or disclose certain limited protected health information about you in our directory while you are a resident or client at Cypress Cove. This information may include your name, your assigned unit or apartment number, your religious affiliation, and a phone number. Your religious affiliation may be given to a member of the clergy. The directory information, except for religious affiliation and phone number may be given to people who ask for you by name.
5. Individuals involved in your care. We may use or disclose your protected health information so that we may bill and collect payment from you, an insurance company, or another third party for the health care services you receive at Cypress Cove. For example, we may need to give information to your health plan regarding the services you received from Cypress Cove so that your health plan will pay us or reimburse you for the services. We also may tell your health plan about a treatment you are going to receive in order to obtain prior approval for the services or to determine whether your health plan will cover the treatment.
6. Individuals involved in your care. We may disclose your protected health information to individuals, such as family and friends, who are involved in your care or who help pay for your care. This disclosure may be face to face, by phone or be electronic mail. We may also disclose your protected health information to a person or organization assisting in disaster relief efforts for the purpose of notifying your family or friends involved in your care about your condition, status and location.
7. Health care operations. We may use or disclose your protected health information to perform certain functions within Cypress Cove. These uses or disclosures are necessary to operate Cypress Cove and to make sure that our residents/clients receive quality care. For example, we may use your protected health information to review our treatment and services and to evaluate the performance of our staff in caring for you. We may combine protected health information about many of our resident/clients to determine whether certain services are effective or whether additional services should be provided. We may disclose your protected health information to physicians, nurses, nursing assistants, medication aides, rehabilitation therapy specialists, technicians, medical and nursing students, and other personnel for review and learning purposes. We also may combine protected health information with information from other health care providers or facilities to compare how we are doing and see where we can make improvements in the care and services offered to our residents/clients. We may remove information that identifies you from this set of protected health information so that others may use the information to study health care and health care delivery without learning the specific identities of our residents/clients.

Uses or disclosures made pursuant to your written authorization.
We may use or disclose your protected health information pursuant to your written authorization for purposes other than treatment, payment or health care operations and for purposes, which are not permitted or required by law. You have the right to revoke a written authorization at any time as long as your revocation is provided to us in writing. If you revoke your written authorization, we will no longer use or disclose your protected health information for the purposes identified in the authorization. You understand that we are unable to retrieve any disclosures, which we may have made pursuant to your authorization prior to its revocation. In the following circumstances, we will always require an authorization from you:

1. Psychotherapy notes. In most circumstances when we use or disclose psychotherapy notes made by a mental health professional to document or analyze a conversation in a counseling session.
2. Paid Marketing. Any marketing communication that is paid for by a third party about a product or service to encourage you to purchase or use the product or service.
3. Payment for PHI. Except for limited transactions permitted by the Privacy Rule, a sale of protected health information for which we directly or indirectly receive remuneration or payment.
4. Cypress Cove Resident Directory. We may use or disclose certain limited protected health information about you in our resident directory while you are a Cypress Cove resident as indicated on the Acknowledgment of Receipt of Notice of Privacy Practices form. This information may include your name, your assigned unit and room number, your religious affiliation, and a phone number. Your religious affiliation may be given to a member of the clergy. The directory information, except for religious affiliation and phone number may be given to people who ask for you by name as indicated on the Acknowledgment of Receipt of Notice of Privacy Practices form.
5. Individuals involved in your care. We may disclose your protected health information to individuals, such as family and friends, who are involved in your care or who help pay for your care as indicated on the Acknowledgement of Receipt of Notice of Privacy Practices form. This disclosure may be face to face, by phone or by electronic mail. We may also disclose your protected health information to a person or organization assisting in disaster relief efforts for the purpose of notifying your family or friends involved in your care about your condition, status and location.
6. Other. Other uses or disclosures of protected health information that are not described in this notice.

Uses or disclosures required by law. We may use or disclose your information where such uses or disclosures are required by federal, state or local law.
1. Public health activities. We may use or disclose your protected health information to public health authorities that are authorized by law to receive and collect protected health information for the purpose of preventing or controlling disease, injury or disability. We may use or disclose your protected health information for the following purposes:
  1. To report births and deaths
  2. To report suspected or actual abuse, neglect, or domestic violence involving a child or an adult
  3. To report adverse reactions to medications or problems with health care products
  4. To notify individuals of product recalls
  5. To notify an individual who may have been exposed to a disease or may be at risk for spreading or contracting a disease or condition
2. Judicial or administrative proceedings. We may use or disclose your protected health information to courts or administrative agencies charged with the authority to hear and resolve lawsuits or disputes. We may disclose your protected health information pursuant to a court order, a subpoena, a discovery request, or other lawful process issued by a judge or other person involved in the dispute, but only if efforts have been made to (i) notify you of the request for disclosure or (ii) obtain an order protecting your protected health information.
3. Law Enforcement official. We may use or disclose your protected health information in response to a request received from a law enforcement official for the following purposes:
  1. In response to a court order, subpoena, warrant, summons or similar lawful process
  2. To identify or locate a suspect, fugitive, material witness, or missing person
  3. Regarding a victim of a crime if, under certain limited circumstances, we are unable to obtain the person’s agreement
  4. To report a death that we believe may be the result of criminal conduct
  5. To report criminal conduct at Cypress Cove
  6. In emergency situations, to report a crime—the location of the crime and possible victims; or the identity, description, or location of the individual who committed the crime
Uses or disclosures permitted by law. Certain state and federal laws and regulations either require or permit us to make certain uses or disclosures of your protected health information without your permission. These uses or disclosures are generally made to meet public health reporting obligations or to ensure the health and safety of the public at large. The uses or disclosures, which we may make pursuant to these laws and regulations, include the following:
1. Health oversight activities. We may use or disclose your protected health information to a health oversight agency that is authorized by law to conduct health oversight activities. These oversight activities may include audits, investigations, inspections, or licensure and certification surveys. These activities are necessary for the government to monitor the persons or organizations that provide health care to individuals and to ensure compliance with applicable state and federal laws and regulations.
2. Worker’s compensation. We may use or disclose your protected health information to worker’s compensation programs when your health condition arises out of a work-related illness or injury.
3. Coroners, medical examiners, or funeral directors. We may use or disclose your protected health information to a coroner or medical examiner for the purpose of identifying a deceased individual or to determine the cause of death. We also may use or disclose your protected health information to a funeral director for the purpose of carrying out his/her necessary activities.
4. Organ procurement organizations or tissue banks. If you are an organ donor, we may use or disclose your protected health information to organizations that handle organ procurement, transplantation, or tissue banking for the purpose of facilitating organ or tissue donation or transplantation.
5. Research. We may use or disclose your protected health information for research purposes under certain limited circumstances. Because all research projects are subject to a special approval process, we will not use or disclose your protected health information for research purposes until the particular research project for which your protected health information may be used or disclosed has been approved through this special approval process. However, we may use or disclose your protected health information to individuals preparing to conduct the research project in order to assist them in identifying residents/clients with specific health care needs who may qualify to participate in the research project. Any use or disclosure of your protected health information which may be done for the purpose of identifying qualified participants will be conducted onsite at Cypress Cove. In most instances, we will ask for your specific permission to use or disclose your protected health information if the researcher will have access to your name, address or other identifying information.
6. To avert a serious threat to health or safety. We may use or disclose your protected health information when necessary to prevent a serious threat to the health or safety of you or other individuals. Any such use or disclosure would be made solely to the individual(s) or organization(s) that have the ability and/or authority to assist in preventing the threat.
7. Military and veterans. If you are a member of the armed forces, we may use or disclose your protected health information as required by military command authorities.
8. National security and intelligence activities. We may use or disclose your protected health information to authorized federal officials for purposes of intelligence, counterintelligence, and other national security activities, as authorized by law.
9. Fundraising. We are permitted to use and disclose your protected health information to raise funds from you for Cypress Cove. If you do not wish to receive fundraising communications from us, we must provide you with an option to opt-out of receipt of such communications. To opt out, notify the philanthropy department.

D. Your rights regarding your protected health information

You have the following rights regarding your protected health information, which we create and/or maintain:

Right to inspect and copy. You have the right to inspect and copy protected health information that may be used to make decisions about your care. Generally, this includes medical and billing records, but does not include psychotherapy notes.To inspect and copy your protected health information, you must submit your request in writing to the health information specialist, resident services coordinator, wellness nurse or the assisted living director with notification to the privacy officer or director of health services. If you request a copy of the information, we may charge a fee for the costs of copying, mailing, or other supplies associated with your request. (For skilled nursing residents: You have the right to request, either orally or in writing, your medical or billing records or other written information that may be used to make decisions about your care. We must allow you to inspect your records within 24 hours of your request. If you request copies of the records, we must provide you with copies within two business days of that request. We may charge a reasonable fee for our costs in copying and mailing your requested information.)We may deny your request to inspect and copy your protected health information in certain limited circumstances. If you are denied access to your protected health information, you may request that the denial be reviewed. Another licensed health care professional selected by Cypress Cove will review your request and the denial. The person conducting the review will not be the person who initially denied your request. We will comply with the outcome of this review.

Right to request an amendment. If you feel that the protected health information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept by or for Cypress Cove. To request an amendment you must provide us with a reason that supports your request.We may deny your request for an amendment if it is not in writing or does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that
1. was not created by us, unless the person or entity that created the information is no longer available to make the amendment
2. is not part of the protected health information kept by or for Cypress Cove
3. is not part of the information which you would be permitted to inspect and copy
4. is accurate and complete

Right to an accounting of disclosures. You have the right to request an accounting of the disclosures, which we have made of your protected health information. This accounting will not include disclosures of protected health information that we made for purposes of treatment, payment, or health care operations.To request an accounting of disclosures, you must submit your request in writing stating a time period, which may not be longer than six (6) years prior to the date of your request and may not include dates before April 14, 2003. Your request should indicate in what form you want to receive the accounting (for example, on paper or via electronic means). The first accounting that you request within a twelve (12)-month period will be free. For additional accountings, we may charge you for the costs of providing the accounting. We will notify you of the cost involved, and you may choose to withdraw or modify your request at that time before any costs are incurred.

Right to request restrictions. You have a right to which we must agree to request that we not disclose to your health plan information about treatment that we provide to you so long as you have separately paid us for the service or treatment involved. You also have the right to request a restriction or limitation on other protected health information for which your health plan does make payment and we use or disclose about you for treatment, payment, or health care operations. We are not required to agree with your request. You also have the right to request a limit on the protected health information we disclose about you to someone, such as a family member or friend, who is involved in your care or in the payment of your care. For example, you could ask that we not use or disclose information regarding a particular treatment that you received.Unless the request involves disclosures to your health plan about treatment for which you have paid, we are not required to agree to your request. If we do agree, we will comply with your request unless the information is needed to provide emergency treatment to you.To request restrictions, you must make your request in writing and you must tell us (a) what information you want to limit; (b) whether you want to limit our use, disclosure or both; and (c) to whom you want the limits to apply (for example, disclosures to a family member).

Right to request confidential communications.
You have the right to request that we communicate with you about your health care in a certain way or at a certain location. For example, you can ask that we only contact you by mail.To request confidential communications, you must make your request in writing. We will not ask you the reason for your request. We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.

Right to be Notified of a Breach. If we improperly permit acquisition, access, use or disclose protected health information about you in a harmful manner, we are required to send, and you have a right to receive, a notice from us informing you about the circumstances involved.

Right to a paper copy of this notice. You have the right to receive a paper copy of this notice. You may ask us to give you a copy of this Notice at any time. Even if you have agreed to receive this notice electronically, you are still entitled to a paper copy of this notice.You may obtain a copy of this notice on the resident portal or our web site: CypressCoveLiving.org. To obtain a paper copy of this notice, contact the marketing department or the concierge desk.

E. Complaints

If you believe your privacy rights have been violated, you may file a complaint with Cypress Cove, by calling (239) 210-9532 or with the secretary of the Department of Health and Human Services. To file a complaint with Cypress Cove or if you have any questions regarding this notice, contact:

Privacy Officer
10200 Cypress Cove Drive
Fort Myers, FL 33908
(239) 210-9532

All complaints must be submitted in writing.

You will NOT be penalized for filing a complaint.

Effective date: 8/15/16

Date(s) of revision: 3/13/17