This Notice of Privacy Practices describes how your personal medical information may be used and disclosed and how you can get access to this information.
Granger Medical Clinic (Granger) understands the importance of privacy and are committed to maintaining the confidentiality of your personal health information (PHI). This includes demographic information, that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services. If you have any questions about this Notice, please contact our Compliance Officer. Contact information is listed at the end of this notice.
We are required to abide by the terms of this Notice of Privacy Practices. We may change the terms of our notice, at any time. The new notice will be effective for all PHI that we maintain at that time.
Granger follows federal and state laws that govern your health information. These laws provide you with certain rights regarding your medical records. Except as outlined below, Granger will not use or disclose your protected health information.
Uses and Disclosures of Your Protected Health Information Permitted by Law
When Granger cares for you, we gather information to assist in your treatment, the payment of that treatment and the standard operations required to accommodate your treatment and/or payment. The following are examples of the types of uses and disclosures of your PHI that Granger is permitted to make once you have signed our consent form. These examples are not meant to be exhaustive, but to describe the types of uses and disclosures that may be made by our office once you have provided consent. The law allows Granger to use or share this information for the following purposes:
- Treatment: To provide treatment and other services to you including appointment reminders, offer health information tips, or to provide other health-related information. In addition, we may disclose your PHI to another physician or healthcare provider involved in your care.
- Payment: To obtain payment for services that we provide to you. This may include such activities as verifying your coverage, coordinating your benefits, or processing an insurance claim and obtaining payment.
- Operations: To improve clinic operations, including business planning activities, assessing and maintaining services, and conducting clinical quality assessment activities.
- Business Associates: There are some services we provide through contracts with outside persons or organizations, such as auditing, accreditation, and legal services, among others. The law requires these business associates to protect your information and obey the same privacy laws as Granger.
- Others Involved in Your Healthcare: To a family member, a close friend, or other person you identify for purposes of assisting in your care. If you are not able to tell us your preference, for example if you are unconscious, we may go ahead and share your information if we believe it is in your best interest. We may also share your information when needed to lessen a serious and imminent threat to health or safety.
- Marketing Communications: To identify health- related services and products that may be beneficial to you and contact you about those services and products.
- Public Health Activities: To report the following to public health authorities, government authorities, or other services authorized by law to receive such reports: (a) health information for the purpose of preventing or controlling disease, injury or disability, and exposure to a communicable disease (b) child, adult, or elder abuse or neglect, (c) domestic violence, (d) information about products under the jurisdiction of the US Food and Drug Administration, or (e) in the event of a disaster to notify family of your location.
- Legal Proceedings: We may disclose PHI in the course of any judicial or administrative proceeding, in response to an order of court or administrative tribunal (to the extent that such disclosure was authorized), in certain conditions in response to a subpoena, and/or discovery request.
- Employer: To your employer as required under laws addressing work-related illnesses and injuries or workplace medical surveillance.
- Health Oversight Activities: To a health oversight agency that oversees the health care system, such as the United States Department of Labor, to ensure compliance with state and federal laws.
- Law Enforcement: We may also disclose PHI for law enforcement purposes which may include: 1) legal processes, 2) limited information requests for identification and location purposes, 3) pertaining to victims of a crime, 4) suspicion of medical emergency or death has occurred as a result of possible criminal conduct, and 5) in the event that a crime occurs on the premises of the practice. In general, we may disclose PHI if we believe that the use of disclosure is necessary to prevent or lessen a serious and imminent threat to the health and safety of a person or the public.
- Workers’ Compensation: Your PHI may be disclosed as authorized to comply with workers compensation laws.
Uses and Disclosures With Your Authorization
Any sharing of your health information, other than as explained above, requires your written authorization. If you authorize us to share your health information but then revoke your request, please notify Granger’s Compliance Officer. We will honor your revocation from the date of receipt.
With regard to your PHI, you may:
- Request a Copy: Request and receive a paper copy of our current Notice of Privacy Practices.
- Request Medical Records: Inspect and obtain a copy of your medical or billing records, as allowed by law, usually within 30 days of your written request.
- Right to Amend Your PHI: You have the right to request an amendment to your PHI. We will comply with your request unless we believe that the information you are requesting be amended is accurate and complete or other special circumstances apply. In such cases we are not required to grant your request.
- Receive Confidential Communications: We will grant any reasonable request to receive confidential communications of PHI by alternative means or at alternative locations, such as by mail to an address other than your home.
- Request PHI Restrictions: Request additional restrictions on how we use or disclose your PHI.
- Restrict Health Plan Disclosure: You have the right to request in writing that we restrict the disclosure of certain personal health information to a health plan if the disclosure is for payment or health care operations and pertains to a health care item or service for which you have paid out of pocket in full. We will accommodate your request, except where we are required by law to make a disclosure.
- Request an Accounting of Disclosure: of when your identifiable health information is shared outside of Granger for a purpose other than the treatment, payment, or operations.
- File a Complaint or Report a Concern: If you are concerned that we may have violated your privacy rights, or disagree with a decision we made about your PHI, you may contact the Granger Compliance Officer via email firstname.lastname@example.org or by calling 801.965.3400, or to the Office for Civil Rights, U.S. Department of Health and Human Services.
Granger Medical Clinic operates the www.grangermedical.com website. This page is used to inform website visitors regarding our policies with the collection, use, and disclosure of Personal Information.
We want to inform you that whenever you visit our website, we collect information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer’s Internet Protocol (IP) address, browser version, pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
“Cookies” are files with small amounts of data that are commonly used and are an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive.
Our website may use these cookies to collect information and to improve our website and marketing practices. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our website.
Links to Other Sites
GMC may make changes to the terms of this notice at any time. If a change is made, the clinic may offer a new policy statement and include any information created or received prior to issuing the new notice. Required changes will be posted prominently throughout the clinic and at www.grangermedical.com.
Privacy Statement 2013-09-23 v5
© Granger Medical Clinic
Conditions of Use for Patient Portal
Patient Portal Not to Be Used for a Medical Emergency
If you have a medical emergency, you should immediately go to your nearest emergency room or dial 911. You should not attempt to communicate with your provider through Patient Portal, as there may be a delay of several days or more before your provider can respond to your concern. Granger Medical Clinic (GMC) cannot guarantee any specific response times to inquiries submitted through Patient Portal.
What This Site Offers
This online site called Patient Portal (“Patient Portal”) is a service of the Granger Medical Clinic (“GMC”) and is designed to offer health, medical and insurance information to GMC patients and members. All patients and members who use Patient Portal are subject to these requirements which are referred to as the “Conditions of Use.” When the term “you” is used below, it refers to the person who is authorized to access the patient’s medical information. In most cases this will be only the patient himself or herself, but adults will often have access to medical information for a minor child and in some cases, adults may have access to a Patient Portal account for another adult due to disability or incapacity.
At this time, we foresee that Patient Portal will primarily be useful for the following types of activities:
- Ability to review upcoming appointments. Please note: patients MUST call your local Granger Medical Clinic office to schedule, confirm or cancel appointments.
- Ability to receive selected lab results.
- Ability to view selected portions of your medical record, such as allergies, medications, histories, problem list and recent visit information.
- Links to other sites that will provide you with other health information.
- Ability to communicate with your physician or other treating provider via secure messaging regarding health concerns.
- Request refills on current medications you have prescribed to you by a Provider at Granger Medical Clinic.
- GMC will make its best effort to provide a timely response to electronic inquiries. In some cases, the clinic staff who need to respond may not be immediately available, so you should allow at least three (3) business days for a response.
Read These Conditions of Use Before Using Patient Portal
It is recommended that you thoroughly review and understand the Conditions of Use prior to using Patient Portal. If you have any questions or concerns, please talk to a GMC staff member about your questions before using Patient Portal. By using Patient Portal including any links available through Patient Portal, you have agreed to abide by all of the terms and conditions of any linked sites as well as these Conditions of Use.
Private Information on This Service
For information regarding the use, disclosure, and protection of personally identifiable information pertaining to Patient Portal, see the Notice of Privacy Practices at https://grangermedical.wpengine.com/privacy-statement. GMC will send you a printed copy of the Notice of Privacy Policies upon request.
Links to Other Sites
Any links contained on Patient Portal are provided solely as a convenience to you. GMC does not endorse nor make any representation regarding such third-party sites, their information, services, or merchandise.
Use of Patient Portal Creates an Agreement
These Conditions of Use form an agreement that is entered into and is subject to the laws of the State of Utah. In the event of litigation relating from your use of Patient Portal, you agree that Utah law will govern any such dispute and you agree to submit to the exclusive personal jurisdiction of the appropriate courts of the State of Utah, either federal or state.
Prohibited Use of Patient Portal
If you live in a state or country that has laws that would either (1) void or alter these Conditions of Use or (2) make illegal the access or use of Patient Portal, then your use of Patient Portal is unauthorized and your use of Patient Portal is at your own risk.
You understand that although GMC has taken reasonable steps and has employed industry-standard practices and technology to ensure the integrity and confidentiality of any personally identifiable information available through Patient Portal, even the most secure system can be violated and that GMC cannot guarantee security. In addition, you understand that you are responsible to ensure that your computer has protections against viruses, malware, spyware, Trojan horses, and other types of problematic computer cookies, downloads, or software. GMC cannot guarantee that your use of Patient Portal will be free of such problems.
By using Patient Portal you agree that you will hold harmless, indemnify, and covenant not to sue GMC for any damage to your computer, laptop, software, or other computer system resulting from your use of Patient Portal.
You understand that registration and use of a personally-identifiable password is a prerequisite to participating in Patient Portal. You agree to use good judgment in the selection of a password, agree to not share this password with others, and you understand that the compromise of your password could allow personal information to become known to other parties. You agree that you are solely responsible for ensuring your password security. You agree to hold harmless, indemnify, and covenant not to sue GMC for any injuries to you or your property (whether physical or psychological) resulting to you from your failure to keep your password secure.
If you feel your personal information has been compromised, please contact the Granger Medical Clinic Privacy Office at 801.965.3552.
Termination of Use of Patient Portal
Either you or GMC, at any time, may cancel participation in Patient Portal. You have no entitlement to continued use of Patient Portal. GMC may cease your access to Patient Portal for any reason related to GMC’s business needs. You may contact your GMC health care provider at any time to request that your access to Patient Portal be terminated.
Nature of Communications with GMC
You understand that Patient Portal will allow you to communicate directly with providers regarding your medical care. You agree that you will only use Patient Portal to convey online messages of a non-urgent nature. You will only convey online messages that are suitable for communication in this medium. Some situations will be best handled either through a telephone conversation or an in-person visit. As described above, for any emergency conditions you should immediately go to your nearest emergency room or dial 911 immediately.
You also agree to communicate only through Patient Portal for your own medical condition or for the medical condition of someone for whom you are authorized to make medical decisions. You agree that asking for advice on behalf of another person for whom you are not authorized to make medical decisions could potentially be harmful and is a violation of these Conditions of Use.
Also, GMC can only respond to the information you have provided. If the information you provide via Patient Portal is incomplete or inaccurate, it will not be possible for GMC to provide a complete or accurate response. You are responsible for any incomplete or inaccurate communications resulting from your submission of incomplete or inaccurate information to GMC.
No Guarantee of Continuous Access to Patient Portal
GMC cannot guarantee that use of Patient Portal will be free of interruptions. GMC regularly engages in routine maintenance of its computer systems, which may lead to inaccessibility of Patient Portal. In addition, factors beyond GMC’s control such as power outages may lead to inaccessibility. During these times if it is necessary to contact your health care provider you should do so by telephone or by an in-person visit.
No Guarantee of Completeness of Medical Record
Patient Portal is designed for your convenience and enhances your access to certain parts of your medical record. However, GMC does not guarantee that Patient Portal contains your complete medical record. In fact, there are certain types of medical information that will never appear in Patient Portal. If you want a complete copy of your medical record, you should contact your healthcare provider by telephone or in person. Never assume that your Patient Portal record is your complete medical record or insurance information.
Messages exchanged between you and your treating provider through Patient Portal become part of your official medical record. This information is confidential but may typically be released with your consent or by legal requirement. You agree to use appropriate discretion when sending online messages, particularly if you do not want the information to appear in the permanent medical record. If you do not want something to appear in the permanent medical record, do not submit it through Patient Portal.
Authorized Access by GMC
Any authorized person at GMC who would otherwise be authorized to access your medical records may be authorized to view information submitted through your Patient Portal account.
Your Responsibility to Review Patient Portal Messages in a Timely Manner
Messages sent to you via Patient Portal might contain information that is important to your health and medical care. It is your responsibility to monitor these messages in a timely manner. You are liable for any loss, injury or claims of any kind resulting from messages that you fail to read in a timely manner.
As a user of Patient Portal, you should be aware that you will be notified via e-mail when there is new medical information to be viewed on Patient Portal. This means that any person with access to your e-mail will be able to see this notification. This could include your family members, employer or anyone else who can access your e-mail account. Although no private medical information will be sent, the notification that new medical information is available may be information that you would not want others to know. Thus, you should take this into account when providing an e-mail address or using Patient Portal.
Proxy Access for Minors
All users of Patient Portal must be at least 18 years of age.
Children ages 0-13 may be able to be web-enabled if either a parent or legal guardian complete a Pediatric Patient Portal Enrollment Form available at the front desk. A different user name will be used for each child. Each child will be disabled within a month of turning 14-years of age.
Minors between the ages of 14-17 years will be web-enabled with their own email address only.
Changes to the Conditions of Use
GMC may modify or change these Conditions of Use at any time. Such modifications or changes become effective immediately when they are posted to Patient Portal. You agree to review these Conditions of Use frequently so that you will be familiar with them. You further agree that each time you use Patient Portal you are, by such use, consenting to the Conditions of Use applicable at that time.
Effective Date Conditional Use for Patient Portal: 09/12/2013.