THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GAIN ACCES TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Sysmex Inostics, Inc. (“Sysmex Inostics”) is required by law to maintain the privacy of health information that identifies you (including basic demographic information, that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services) called “protected health information” (PHI) and to provide you with a notice of our legal duties and privacy practices with respect to protected health information. Sysmex Inostics is committed to the protection of your PHI and will make reasonable efforts to ensure the confidentiality of your PHI, as required by statute and regulation and in compliance with this Notice of Privacy Practices. Sysmex Inostics will limit the use, disclosure of and requests for PHI to the minimum necessary to accomplish the identified purpose. Sysmex Inostics is required by law to notify you if a breach of unsecured PHI occurs. We will not use or disclose your PHI without your written permission, except as described in this Notice. Sysmex Inostics takes this commitment seriously and will work with you to comply with your right to receive certain information under HIPAA.
We reserve the right to change our practices and this Notice as and to the extent permitted by law and to make the new Notice effective for all protected health information we maintain. Upon your request, we will provide you with a revised Notice.
Sysmex Inostics’ Use and Disclosure of Protected Health Information
As permitted under HIPAA, PHI may be used and disclosed for treatment, payment, healthcare operations, and other purposes permitted or required by law. Sysmex Inostics may use and disclose your PHI without signed authorization for the following purposes:
Treatment
We may use or disclose your PHI to provide and coordinate the treatment and services you receive. For example, we may use your information to perform diagnostic tests, or provide your test results to your physician.
Payment
We may use and disclose your PHI to others for purposes of receiving payment for treatment and services that you receive. For example, we will submit a claim to you or your health plan/insurer that includes information that identifies you and the type of services we performed for you.
Health Care Operations
We may use or disclose your PHI in order to support the operations of our laboratories and monitor the quality of the care we provide. For example, we may use information in your health record for monitoring the quality of Sysmex Inostics’ testing services, reviewing the competence or qualifications of laboratory professionals, conducting training programs, performing accreditation, certification, licensing and credentialing activities, and other administrative functions.
Individuals Involved in your Care or Payment for your Care
Sysmex Inostics may disclose PHI about you to your authorized personal representative, as defined by applicable law, or to an administrator, executor, or other authorized person responsible for your estate. As allowed by federal and state law, Sysmex Inostics may disclose the PHI of minors to their parents or legal guardians.
Business Associates
Sysmex Inostics may disclose your PHI to other companies or individuals, known as “business associates,” who need your information to provide services to us (e.g., billing services). Sysmex Inostics’ business associates are required to protect the privacy of PHI.
HIPAA permits and requires additional uses and disclosures that may be made without your authorization or opportunity to agree or object. We will limit the information disclosed to the minimum necessary to accomplish the identified purpose. These situations include:
Public Health
As required by law, we may disclose your PHI to public health or legal authorities charged with preventing or controlling disease, injury, or disability.
Disclosure for Judicial and Administrative Proceedings
Under certain circumstances, Sysmex Inostics may disclose your PHI in the course of a judicial or administrative proceeding, including a response to a court or administrative order, subpoena, discovery request, or other lawful process.
Law Enforcement
We may disclose your PHI for law enforcement purposes as permitted by law or in response to a valid subpoena or court order.
As Required by Law
We will disclose your PHI when required to do so by federal, state, or local law.
Health Oversight Activities
We may disclose your PHI to an oversight agency for activities authorized by law. These oversight activities include audits, investigations, and inspections necessary for licensure and for the government to monitor the health care system, government programs, and compliance with civil rights laws.
Research
We may disclose your PHI to researchers when their research has been approved by an institutional review board or privacy board that has reviewed the research proposal and established protocols to ensure the privacy of your information.
Coroners, Medical Examiners, and Funeral Directors
We may release your PHI to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine the cause of death. We may also disclose PHI to funeral directors consistent with applicable law to enable them to carry out their duties.
Organ or Tissue Procurement Organizations
Consistent with applicable law, we may disclose your PHI to organ procurement organizations or other entities engaged in the procurement, banking, or transplantation of organs for the purpose of tissue donation and transplant.
Correctional Institution
If you are or become an inmate of a correctional institution, we may disclose to the institution or its agents PHI necessary for your health and the health and safety of other individuals.
Workers’ compensation
As authorized by applicable laws, Sysmex Inostics may use or disclose PHI to comply with workers’ compensation or other similar programs established to provide work-related injury or illness benefits.
Serious Threat to Health or Safety
We may use and disclose your PHI when necessary to prevent a serious threat to your health and safety or the health and safety of the public or another person.
Victims of Abuse or Neglect
We may disclose PHI about you to a government authority if we reasonably believe you are a victim of abuse or neglect. We will only disclose this type of information to the extent required by law, if you agree to the disclosure, or if the disclosure is allowed by law and we believe it is necessary to prevent serious harm to you or someone else.
Military and National Security
We may disclose PHI of individuals who are Armed Forces personnel under activities deemed necessary by military command authorities, for purpose of benefit eligibility by the Department of Veteran Affairs, or to a foreign military authority if you are a member of that foreign military service. We may also disclose PHI to authorized federal officials for conducting national security and intelligence activities, including for the provisions of protective services to the President or others legally authorized.
Your Rights Regarding Protected Health Information
Subject to certain exceptions, you have the following rights with respect to your PHI. To exercise any of these rights, please contact Sysmex Inostics using the contact information listed at the end of the Privacy Statement.
Right to receive a copy of the Sysmex Inostics Notice of Privacy Practices
You have a right to receive a copy of the Sysmex Inostics Notice of Privacy Practices at any time.
Right to request limits on uses and disclosures of your Protected Health Information
You have the right to request that Sysmex Inostics limit: 1) how Sysmex Inostics use and disclose your PHI for treatment, payment, and health care operations activities; or 2) Sysmex Inostics’ disclosure of PHI to individuals involved in your care or payment for your care. Sysmex Inostics will consider your request but is not required to agree to it unless the disclosure is for payment or health care operation purposes and the PHI pertains solely to a health care item or service for which you have paid in full. If Sysmex Inostics agrees to it, Sysmex Inostics will state the agreed restrictions in writing and will abide by them, except in emergency situations when the disclosure is for purposes of treatment.
Right to request confidential communications
You have the right to request that Sysmex Inostics communicate with you about your PHI at an alternative address or by an alternative means. Sysmex Inostics will accommodate reasonable requests.
Right to see and receive copies of PHI
You have the right to access and receive a copy of PHI that may be used to make decisions about your care or payment for your care. Sysmex Inostics may deny access to certain information for specific reasons, for example, where state law prohibits such patient access.
Right to receive an accounting of disclosures
You have a right to receive a list of certain instances in which Sysmex Inostics disclosed your PHI. This list will not include disclosures of PHI such as those made for treatment, payment, health care operations, or disclosures made based on your written authorization submitted for genetic counseling services. Unless a shorter period of time is requested, the list will include disclosures made in the past six years.
Right to correct or update your PHI
f you believe that your PHI contains a mistake, you may request, in writing, that Sysmex Inostics correct the information. If your request is denied, Sysmex Inostics will provide an explanation of the reasoning for Sysmex Inostics denial.
How to Exercise Your Rights and How to Contact Sysmex Inostics or File a Complaint
If you have questions or comments regarding the Sysmex Inostics Notice of Privacy Practices or to exercise any of your rights described in this notice or if you have a complaint about Sysmex Inostics’ use or disclosure of your PHI or Sysmex Inostics’ privacy practices, please contact the Sysmex Inostics Privacy Officer at privacyofficer@sysmex-inostics.com, call us at 1-443-759-8650, or send a written request to:
Sysmex Inostics Inc.
Attention: Privacy Officer
1812 Ashland Avenue, Suite 500
Baltimore, MD 21205
You also may file a complaint with the Secretary of the US Department of Health and Human Services. Sysmex Inostics will not take retaliatory action against you for filing a complaint about Sysmex Inostics’ privacy practices.
Effective Date of Notice: April 30, 2020
Document Number: QA002-F02_v03