The following categories describe the different ways in which HIPAA allows HCPH to use and/or disclose your health information without your authorization. This is not an exhaustive list of every type of use or disclosure that HCPH is permitted to make, but the different ways HCPH is permitted to use and disclose your health information do fall within one of the following categories.
1. Treatment
HCPH will use and disclose your health information as necessary to provide, coordinate, or manage healthcare or related services. This includes providing care to you, consulting with another healthcare provider about you, and referring you to another healthcare provider. For example, HCPH may disclose your health information to refer you to a high-risk clinic or a hospital for additional healthcare services. HCPH may also contact you to remind you of an appointment or to tell you about other health-related information that may be of interest to you.
2. Payment
HCPH may use or disclose your health information to pay or to collect payment for your healthcare. For example, HCPH can use or disclose your health information to bill your insurance company, Medicaid, or other funding sources such as the Texas Department of State Health Services for the healthcare services that HCPH provided to you.
3. Health Care Operations
HCPH may use or disclose your health information for healthcare operations. Examples of healthcare operations include:
- Conducting quality assessment, improvement activities, training healthcare professionals;
- Coordinating and managing care; and
- Performing HCPH’s general administrative activities.
4. Family Member, Other Relative, Personal Representative, or Close Personal Friend
HCPH may disclose your health information to your family members, other relatives, your personal representative, or a close personal friend. A personal representative is a person who has legal authority to act on your behalf regarding your healthcare. However, HCPH will only disclose your health information to your family members, other relatives, your personal representative, or a close personal friend when the health information being disclosed is related to that person’s involvement with your care or payment for your care and you have been given an opportunity to stop or limit the disclosure before it happens.
5. Business Associates
HCPH may disclose your health information to a business associate of HCPH. HCPH business associates are individuals or entities that are not employees of HCPH but they perform certain functions for HCPH or provide certain services to HCPH. HCPH has a contract with each of its business associates and this contract prohibits the business associate from using or disclosing any health information that they receive from HCPH or that the business associate creates for HCPH for reasons other than those specified in the contract. In other words, your health information might be used by, created by, stored at, or disclosed to a business associate, but the business associate can use it only on HCPH’s behalf. For example, HCPH entered into a contract with Harris Health System (HHS) to allow HCPH to use HHS’s Electronic Medical Record System. All of HCPH’s patients’ medical records are disclosed to HHS and are stored on HHS computers, but the contract prohibits HHS employees from accessing or using any of HCPH’s patients’ medical records unless the patient is a patient of both HCPH and HHS.
6. As Required by Law
HCPH will use or disclose your health information when required to do so by federal, state, local, or any other applicable law. For example, HCPH must disclose your health information to the U.S. Department of Health and Human Services when the Department wants to determine whether HCPH is in compliance with HIPAA.
7. Public Health
HCPH may disclose your health information for purposes of preventing or controlling disease, injury, or disability, or to report vital statistics, or to report problems with FDA-regulated products or activities.
8. Victims of Abuse, Neglect, or Domestic Violence
If HCPH believes that you are or that you have been the victim of abuse, neglect, or domestic violence HCPH will disclose your health information to the appropriate government authority but only to the extent such a disclosure is required or expressly authorized by Texas law or when you agree to HCPH making the disclosure.
9. To Avert a Serious Threat to Health or Safety
HCPH may use or disclose your health information if HCPH believes the use or disclosure is necessary in order to prevent or lessen a serious and immediate threat to your health and safety or to the health and safety of the public or another person.
10. Health Oversight Activities
HCPH may sometimes use or disclose your health information for health oversight activities. Health oversight activities include audits, inspections, and investigations that are authorized by law or are necessary for governmental oversight of the healthcare system. For example, HCPH may disclose your health information to the Centers for Medicare and Medicaid Services (CMS) if CMS is investigating a physician who is suspected of engaging in Medicare or Medicaid fraud.
11. Research
HCPH may use or disclose your health information for research purposes, but only if the HCPH Institutional Review Board has approved the research study. HCPH will only disclose information that can be used to identify you when the research that is being conducted could not be conducted without the identifying information.
12. Purposes Relating to Death
HCPH may disclose your health information to (1) hospitals for the purpose of organ transplants, (2) coroners or medical examiners to identify a deceased person or to determine the person’s cause of death, and (3) funeral directors as necessary for their duties.
13. Eye, Organ, or Tissue Donation
HCPH may disclose your health information to organizations that handle organ and tissue procurement, banking, or transplantation if your information is needed because you are listed as an organ donor.
14. Judicial and Administrative Proceedings
HCPH may disclose your health information in response to a valid subpoena, discovery request, or other lawful process by someone else involved in a lawsuit in which your health information is at issue, but HCPS will only do so after HCPH makes reasonable efforts to tell you about the request or if we obtain a court order protecting the health information that is requested by the subpoena, discovery request, or other lawful process.
15. Law Enforcement Purposes.
HCPH will not disclose your health information to a law enforcement official unless the law enforcement official provides HCPH with: (1) a court order or court-ordered warrant, or a subpoena or summons issued by a judicial officer; (2) a grand jury subpoena; or (3) a request, subpoena, investigative demand, or similar process that shows that (a) the information sought is relevant and material to a legitimate law enforcement inquiry; (b) the request is specific and limited in scope to the purpose for which it is requested; and (c) de-identified health information could not be used. HCPH may disclose health information if asked to do so by a law enforcement official (1) to identify or locate a suspect, fugitive, material witness, or missing person; (2) about an individual who is or is suspected to be a victim of a crime; (3) about a death HCPH believes may be the result of criminal conduct; and (4) about criminal conduct that occurred on HCPH premises.
16. Military and Veterans, National Security and Intelligence Activities, and Protective Services for the President and Others
If you are a member of the armed forces, HCPH may disclose your health information as required by military command authorities. HCPH may also disclose your health information to authorized federal officials (1) for intelligence, counter-intelligence, and other national security activities authorized by law and (2) to provide protection to and conduct special investigations of threats against the President or other authorized persons.
17. Workers’ Compensation
HCPH may disclose your health information to comply with laws relating to workers’ compensation or other similar programs (that provide benefits for work-related injuries or illnesses).