Notice of Privacy Practices

EFFECTIVE OCTOBER 1, 2012

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW CAREFULLY.

Kennedy Krieger Institute is committed to the privacy and confidentiality of your medical information. This notice tells you what we may do with your “Protected Health Information” (PHI), which includes information that identifies you and tells about your past, present, or future physical or mental health or condition and related healthcare services, such as your billing records. We may use or disclose your PHI only as explained in this notice. PHI includes your health information created or received by us. In this notice, “you” refers to the subject of the health information. If the patient is a minor, then a parent, guardian, or other authorized personal representative has the right to exercise the rights explained in this notice.

This notice describes how we may use and disclose your PHI for treatment, billing for services, or healthcare operations. This notice also describes when we may use or disclose your PHI when you do not object, as allowed by your written permission and as allowed without your permission. You may ask for a paper copy of this notice either today, at the time of your next appointment, or by contacting the Kennedy Krieger Institute Privacy Officer as explained at the end of this notice. It also is available on our website at kennedykrieger.org. We will do what we say in this notice. We may change what we do from time to time as needed. If we do, the new notice will be effective for all the PHI that we have. The revised notice will be available online at kennedykrieger.org.

Kennedy Krieger’s Notice of Privacy Practices covers the following organizations:

Kennedy Krieger Institute, Inc.
Kennedy Krieger Associates, Inc.
Kennedy Krieger Children’s Hospital, Inc.
Kennedy Krieger Education & Community Programs, Inc.
PACT: Helping Children With Special Needs, Inc.

each and all of which are referred to as Kennedy Krieger Institute.

Kennedy Krieger Institute may, without your authorization, use your PHI to provide treatment, obtain payment, and support its healthcare operations.

Federal Privacy Regulations and State Law give you privacy rights.

You have the right to ask us to restrict how we use or disclose your PHI for treatment, billing for services, or healthcare operations. However, we are not allowed to withhold your PHI when we are required by law to disclose it. In an emergency, we are allowed to use or disclose your PHI to treat you. To request a restriction, please make your request to the registration staff. They will help you write your request. We may either agree to your request or turn down your request. If we agree to your request, we are allowed to end the restriction once we tell you. If we end the restriction, it will only affect PHI that is created or received after we notify you.
You have the right to ask that we communicate with you in another way or at another location. You need to provide details about how to contact you. If we cannot contact you using the information you provide, we may contact you using any information on file. We will not require you to explain why you prefer this means of communication. We will honor reasonable requests. However, we require an accurate billing address.
You have the right to see and receive copies of your PHI. Except for some types of PHI such as psychotherapy notes and PHI from research projects while they are in progress, you have the right to see and receive a copy of your PHI in your medical and billing records. We may charge you a reasonable fee for copying your records. We may deny access if your record relates to a mental health problem and we believe such access may endanger you. You may request that we designate a licensed healthcare professional to review the denial.
You have the right to ask us to amend your PHI in the medical and billing records. If we accept your request, we will tell you we agree, and we will amend our records. (We do not change what is in the record. We add the amended information.) With your assistance, we will notify others who have the prior PHI. If we deny your request, we will provide a written explanation of why we did not make the amendment and explain your rights. We may deny your request if the PHI was not created by us, is not part of the medical and billing records, or is not available for inspection, or if we determine the existing PHI is accurate and complete.
You have the right to receive an accounting of disclosures of your PHI made by us since April 14, 2003. The accounting will not include disclosures made:
- To carry out treatment, billing for services, and healthcare operations.
- To you or your personal representative.
- To parties you authorize to receive your PHI or information given as permitted through our patient directory.
- To your family members or friends who are involved in your care.
- For national security or intelligence purposes.
- To correctional institutions or law enforcement officials.

For your protection, we may check your identity prior to responding to any questions you may have about your treatment or payment activities. We will check your identity whenever we get requests to look at, copy, or amend your records or to obtain a list of disclosures of your PHI. Forms for each of these requests are available from our Health Information Management Department.

Under the following circumstances, Federal Privacy Regulations and State Law allow us to use or disclose your PHI, but you will have the opportunity to agree or to say no before such uses or disclosures:

To maintain a list of patients and their general condition, which may be given to members of the public if they ask for you by name. (Unless you say no, your location and general condition may be given to anyone who asks for you by name.)
To a family member (or any other person identified by you) as needed for your care or payment for your healthcare. (If you agree or do not say no, your caregivers may use your PHI to do this.)
To locate a family member (or other person responsible for your care) and notify them of your location, general condition, or death. This disclosure may be to a disaster relief agency. (If you agree or do not say no, your caregivers may use your PHI to do this.)

If you wish to refuse these uses and disclosures, you may do so by telling your caregivers.

The Federal Privacy Regulations allow Kennedy Krieger Institute to use and disclose PHI for research under specific rules:

Kennedy Krieger Institute participates in research studies. When possible, we will obtain your written permission to use or disclose your PHI for research. Federal law also allows us to seek permission to use your PHI for research from either an Institutional Review Board or a privacy board under certain conditions. Federal law also allows researchers to look at your PHI when preparing research studies or doing research on those who have died. Federal law requires researchers to agree to protect the privacy of your health information in all cases.

The Federal Privacy Regulations and State Law allow us to use or disclose your PHI with your written permission:

Uses and disclosures not otherwise allowed under the Privacy Regulations and State Law require your written permission.

Your written permission is needed if you want Kennedy Krieger Institute to make a disclosure of PHI that is not allowed without your permission. For example, you may want your lawyer to have a copy of your medical records. You must give your written permission before we may send your PHI to your lawyer.

Your written permission is also needed if we want to use or disclose your PHI for some reason not allowed without your permission. For example, we may ask your permission to use PHI concerning your diagnosis or treatment to contact you about making a charitable contribution to support research or programs at Kennedy Krieger Institute. If you give your written permission, we may then use this PHI to contact you. For another example, we may ask your permission to use your PHI in a magazine article about a particular disease or about Kennedy Krieger Institute patients or physicians. If you give your written permission, we may then disclose the PHI you have permitted us to share. If you do give your permission, you may cancel it at any time. However, uses and disclosures made before your cancellation are not affected by your action. If your cancellation relates to research, researchers are allowed to continue to use the PHI they have gathered before your cancellation if they need it in connection with the research study or to follow up with the study.

The Federal Privacy Regulations and State Law allow us to use or disclose your PHI without your written permission in the following situations:

Treatment: We may use your PHI when we send specimens to the lab. We may disclose your PHI to another healthcare provider or specialist to help treat you.
Billing: We may use your PHI to bill, obtain payment, and be reimbursed by third parties. For example, we may contact your insurance company to determine if you are enrolled and what coverage you have. We may disclose your PHI to your insurance company to bill for your healthcare services.
Healthcare Operations: We may use your PHI to evaluate our healthcare providers and to train our staff and students. We may also use your PHI to develop or evaluate clinical guidelines or conduct internal audits. Your PHI may also be used to remind you of your appointment(s) and to provide you with information about treatment alternatives or other health-related benefits and services that may be of interest to you. We may use some PHI, such as your name and address, for our fundraising efforts.
Fundraising: We or our related foundation may disclose or use your name, demographic information, and dates of service at Kennedy Krieger Institute to raise funds on behalf of Kennedy Krieger Institute.
We also may disclose your PHI, and in some cases we must disclose your PHI, to:
- Business associates who perform a job for us.
- Public agencies when we believe there may be possible abuse or neglect.
- Respond to a court order, a subpoena, or other lawful instructions from courts or public bodies.
- Law enforcement officials (under some circumstances and with some restrictions).
- Comply with other laws.
- Public health authorities for disease control or prevention, to report child abuse or neglect, or for oversight of FDA-regulated products or activities.
- Prevent a serious threat to public health or safety.
- Public agencies if we believe a person has been exposed to a communicable disease or there is a person who is at risk of contracting or spreading a disease or condition.
- An employer to evaluate a work-related illness or injury, or to evaluate the workplace in some circumstances.
- A coroner, medical examiner, or funeral director in some circumstances.
- Authorized federal officials for intelligence and law enforcement activities.
- An agency administering a public benefits program.
- A health oversight agency for its oversight activities.
- Workers’ compensation carriers or other similar programs.
- Enable organ, eye, or tissue donation and transplantation.
- Inform you about the services and treatments we offer.
- Permit the Secretary of the U.S. Department of Health and Human Services to see our facilities and information (including PHI) to determine our compliance with privacy requirements.

Privacy Regulations also allow Kennedy Krieger Institute to remove most identifying information from health information that could possibly identify you and then use this information for research, health oversight, and operations activities without your permission. If we do this, we must have an agreement with anyone we share the information with to use the information only for the permitted purposes and not to identify you from the information.

If you believe we have used your PHI inappropriately, you may file a written complaint with us.

Please send it to the Privacy Officer at Kennedy Krieger Institute, 707 North Broadway, Baltimore, Maryland 21205. You may also file a complaint with the Secretary of U.S. Department of Health and Human Services. If you file a complaint, we will not take action against you.

IF YOU WOULD LIKE FURTHER INFORMATION ABOUT THIS NOTICE, PLEASE CONTACT THE KENNEDY KRIEGER INSTITUTE PRIVACY OFFICER BY CONTACTING 443-923-1843, OR HIPAA@KENNEDYKRIEGER.ORG.

EFFECTIVE OCTOBER 1, 2012, AND SUPERSEDES EARLIER VERSIONS.

Related Materials and Information