503 Rehab is required by law to keep all protected healthcare information private. (Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), 42U.S.C. & 1320d et seq., 45 C.F.R. Parts 160 & 164, and the Confidentiality Law, 42U.S.C & 290dd-2, 42 C.F.R. Part 2.)

503 Rehab will not disclose your private healthcare information to anyone outside of the organization without written permission from you. You may sign a Release of Information(ROI) if you wish for 503 Rehab to share your information with another healthcare provider or entity.

Federal Law does allow 503 Rehab to share information in some of the following instances:

• During a medical emergency.
• During an official audit or evaluation.
• If a crime has been committed on 503 Rehab property.
• To report child abuse or neglect.
• If there is a court order.
• Pursuant to an organization that has a signed BAA (Business Associate Agreement) with 503 Rehab.

What are my rights?

You have the right to access your own personal healthcare information upon request.

You have the right to restrict or deny how 503 Rehab uses your private healthcare information.

You have the right to complain to 503 Rehab or the Secretary of the United States Health and Human services without retaliation.

How do I make a complaint?

If you believe that your privacy rights have been violated under HIPAA, you may file a complaint with the Secretary of the United States Department of Health and Human Services.

If you believe that your privacy rights have been violated under the confidentiality law, you may file a complaint with the United States Attorney in the district where the violation occurred.

Who can I contact with questions or concerns about 503 Rehab’s privacy policy?

Any questions or concerns regarding 503 Rehab’s privacy policy can be directed to (971) 458-1567.