This notice, effective Sept. 23, 2013, describes how Granger Medical Clinic (GMC) may use and disclose your “Protected Health Information” (PHI) in compliance with the Health Insurance Portability and Accountability Act 1996 (HIPAA).
GMC is required to maintain the privacy of your PHI and to provide you with a notice about our legal duties and privacy practices with respect to your PHI. We are also required to accommodate reasonable requests you make to communicate PHI by alternative means or at alternative locations. Any time we use or disclose your PHI, we must follow the terms of this notice.
Uses and Disclosures of Your Protected Health Information Permitted by Law
According to law, we may use or disclose your PHI any one of the following purposes:
(1) Treatment. To provide treatment to you or offer you various services. For example, we may contact you to provide appointment reminders, offer health information tips, or to provide you with other health-related information.
(2) Payment. To obtain payment for services that we provide to you. This may include such activities as verifying your coverage, coordinating your benefits from a second payer, or processing an insurance claim and obtaining payment.
(3) Operations. For clinic operations, which may include administration and planning programs that improve the quality and effectiveness of the care that we provide you. Such programs may include business-planning activities, assessing and maintaining services, and conducting clinical quality assessment and improvement activities.
(4) Business Associates. There are some services we provide through contracts with our business associates. In such situations, we may disclose your personal health information to our business associates so that they can perform the job we asked them to do. We require all business associates to appropriately safeguard your information in accordance with applicable law.
(5) Individuals Involved in Your Care or Payment for Your Care. To a family member, a close personal friend, or any other person identified by you if we (a) obtain your agreement, (b) provide you with the opportunity to object to the disclosure and you do not object, or (c) reasonably infer that you do not object to the disclosure.
(6) Health Care Communications. To identify health-related services and products that may be beneficial to you and contact you about those services and products.
(7) Public Health Activities. To report the following to public health authorities, government authorities, or other services authorized by law to receive such reports: (a) health information for the purpose of preventing or controlling disease, injury or disability; (b) child, adult or elder abuse or neglect; (c) domestic violence; and (d) information about products under the jurisdiction of the US Food and Drug Administration.
(8) Employer. To your employer as required under laws addressing work-related illnesses and injuries or workplace medical surveillance.
(9) Health Oversight Activities. To a health oversight agency that oversees the health care system and ensures compliance with the rules of government health programs, such as Medicare or Medicaid.
(10) Judicial and Administrative Proceedings. In the course of a judicial or administrative proceeding in response to a legal order or other lawful process.
(11) Threat to Health and Safety. To reduce or prevent a serious threat to public health and safety.
(12) Law Enforcement Officials; Specialized Government Functions. To the police or other law enforcement officials as required by law or in compliance with a court order; to military authorities for the personal and health information of armed forces personnel under certain circumstances; or to authorized federal officials for personal and health information required for lawful intelligence, counterintelligence or other national security issues.
(13) Descendants. To a coroner, medical examiner, or funeral director as authorized by law.
(14) Organ and Tissue Procurement. To organizations that facilitate organ, eye, or tissue procurement, banking, or transplantation.
(15) Workers’ Compensation. To comply with workers’ compensation laws.
Uses and Disclosures With Your Authorization
GMC cannot use your PHI for anything other than the reasons mentioned above without your signed authorization. You may revoke such authorization in writing. We are required to honor and abide by that written request except to the extent that we have already taken actions relying on your authorization.
Your Individual Rights
(1) Right to Receive a Paper Copy of This Notice. Upon request, you may obtain a paper copy of this notice even if you agreed to receive such notice electronically. GMC will post this notice prominently throughout our clinics and at www.grangermedical.com.
(2) Right to Access Your PHI. You may request access to your medical record file as well as claims, claims payment, claims adjudication, medical management records, and your billing records maintained by us in order to inspect and request copies of these records. Under limited circumstances, we may deny you access to a portion of your records. If your request is denied, you will receive a written response. If you request a copy or copies of your record, you may be charged a fee.
(3) Right to Amend Your PHI. You have the right to request an amendment to your PHI. We will comply with your request unless we believe that the information you are requesting be amended is accurate and complete or other special circumstances apply. In such cases we are not required to grant your request.
(4) Right to Receive Confidential Communications. We will grant any reasonable request to receive confidential communications of PHI by alternative means or at alternative locations, such as by mail to an address other than your home.
(5) Right to Request Additional Restrictions. You have the right to request in writing that we place additional restrictions on how we use or disclose your PHI. While we will consider any request for additional restrictions, we are not required to agree to your request. Additionally, you have the right to “opt out” with respect to receiving fundraising communications from us.
(6) Right to Receive An Accounting of Disclosures. You have the right to make a written request to receive an accounting of certain disclosures of PHI made by us or by our business associates.
(7) Right to Restrict Disclosure to Your Health Plan. You have the right to request in writing that we restrict the disclosure of certain personal health information to a health plan if the disclosure is for payment or health care operations and pertains to a health care item or service for which you have paid out of pocket in full. We will accommodate your request, except where we are required by law to make a disclosure.
(8) Right to Be Notified if Your Unsecured PHI is intentionally or unintentionally disclosed. You have the right to be notified following a breach of your PHI.
(9) Right to File a Complaint. If you believe your privacy rights have been violated, in addition to filing a complaint with us, you have the right to file a written complaint with the Office for Civil Rights of the United States Department of Health and Human Services. Under no circumstances will we retaliate against you for filing a complaint with us or with the Office for Civil Rights.
If you would like more information about your privacy rights, are concerned that we may have violated your privacy rights, or disagree with a decision we may have made about access to your PHI, you may contact the GMC Privacy Officer by phone at 801.965.3600 or by mail at:
Granger Medical Clinic
c/o Compliance Officer
3725 W. 4100 S.
West Valley City, UT, 84120
Granger Medical Clinic operates the www.grangermedical.com website. This page is used to inform website visitors regarding our policies with the collection, use, and disclosure of Personal Information.
We want to inform you that whenever you visit our website, we collect information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer’s Internet Protocol (IP) address, browser version, pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
“Cookies” are files with small amounts of data that are commonly used and are an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive.
Our website may use these cookies to collect information and to improve our website and marketing practices. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our website.
Links to Other Sites
GMC may make changes to the terms of this notice at any time. If a change is made, the clinic may offer a new policy statement and include any information created or received prior to issuing the new notice. Required changes will be posted prominently throughout the clinic and at www.grangermedical.com.
Privacy Statement 2013-09-23 v5
© Granger Medical Clinic
Conditions of Use for Patient Portal
Patient Portal Not to Be Used for a Medical Emergency
If you have a medical emergency, you should immediately go to your nearest emergency room or dial 911. You should not attempt to communicate with your provider through Patient Portal, as there may be a delay of several days or more before your provider can respond to your concern. Granger Medical Clinic (GMC) cannot guarantee any specific response times to inquiries submitted through Patient Portal.
What This Site Offers
This online site called Patient Portal (“Patient Portal”) is a service of the Granger Medical Clinic (“GMC”) and is designed to offer health, medical and insurance information to GMC patients and members. All patients and members who use Patient Portal are subject to these requirements which are referred to as the “Conditions of Use.” When the term “you” is used below, it refers to the person who is authorized to access the patient’s medical information. In most cases this will be only the patient himself or herself, but adults will often have access to medical information for a minor child and in some cases, adults may have access to a Patient Portal account for another adult due to disability or incapacity.
At this time, we foresee that Patient Portal will primarily be useful for the following types of activities:
- Ability to review upcoming appointments. Please note: patients MUST call your local Granger Medical Clinic office to schedule, confirm or cancel appointments.
- Ability to receive selected lab results.
- Ability to view selected portions of your medical record, such as allergies, medications, histories, problem list and recent visit information.
- Links to other sites that will provide you with other health information.
- Ability to communicate with your physician or other treating provider via secure messaging regarding health concerns.
- Request refills on current medications you have prescribed to you by a Provider at Granger Medical Clinic.
- GMC will make its best effort to provide a timely response to electronic inquiries. In some cases, the clinic staff who need to respond may not be immediately available, so you should allow at least three (3) business days for a response.
Read These Conditions of Use Before Using Patient Portal
It is recommended that you thoroughly review and understand the Conditions of Use prior to using Patient Portal. If you have any questions or concerns, please talk to a GMC staff member about your questions before using Patient Portal. By using Patient Portal including any links available through Patient Portal, you have agreed to abide by all of the terms and conditions of any linked sites as well as these Conditions of Use.
Private Information on This Service
For information regarding the use, disclosure, and protection of personally identifiable information pertaining to Patient Portal, see the Notice of Privacy Practices at http://grangermedical.wpengine.com/privacy-statement. GMC will send you a printed copy of the Notice of Privacy Policies upon request.
Links to Other Sites
Any links contained on Patient Portal are provided solely as a convenience to you. GMC does not endorse nor make any representation regarding such third-party sites, their information, services, or merchandise.
Use of Patient Portal Creates an Agreement
These Conditions of Use form an agreement that is entered into and is subject to the laws of the State of Utah. In the event of litigation relating from your use of Patient Portal, you agree that Utah law will govern any such dispute and you agree to submit to the exclusive personal jurisdiction of the appropriate courts of the State of Utah, either federal or state.
Prohibited Use of Patient Portal
If you live in a state or country that has laws that would either (1) void or alter these Conditions of Use or (2) make illegal the access or use of Patient Portal, then your use of Patient Portal is unauthorized and your use of Patient Portal is at your own risk.
You understand that although GMC has taken reasonable steps and has employed industry-standard practices and technology to ensure the integrity and confidentiality of any personally identifiable information available through Patient Portal, even the most secure system can be violated and that GMC cannot guarantee security. In addition, you understand that you are responsible to ensure that your computer has protections against viruses, malware, spyware, Trojan horses, and other types of problematic computer cookies, downloads, or software. GMC cannot guarantee that your use of Patient Portal will be free of such problems.
By using Patient Portal you agree that you will hold harmless, indemnify, and covenant not to sue GMC for any damage to your computer, laptop, software, or other computer system resulting from your use of Patient Portal.
You understand that registration and use of a personally-identifiable password is a prerequisite to participating in Patient Portal. You agree to use good judgment in the selection of a password, agree to not share this password with others, and you understand that the compromise of your password could allow personal information to become known to other parties. You agree that you are solely responsible for ensuring your password security. You agree to hold harmless, indemnify, and covenant not to sue GMC for any injuries to you or your property (whether physical or psychological) resulting to you from your failure to keep your password secure.
If you feel your personal information has been compromised, please contact the Granger Medical Clinic Privacy Office at 801.965.3552.
Termination of Use of Patient Portal
Either you or GMC, at any time, may cancel participation in Patient Portal. You have no entitlement to continued use of Patient Portal. GMC may cease your access to Patient Portal for any reason related to GMC’s business needs. You may contact your GMC health care provider at any time to request that your access to Patient Portal be terminated.
Nature of Communications with GMC
You understand that Patient Portal will allow you to communicate directly with providers regarding your medical care. You agree that you will only use Patient Portal to convey online messages of a non-urgent nature. You will only convey online messages that are suitable for communication in this medium. Some situations will be best handled either through a telephone conversation or an in-person visit. As described above, for any emergency conditions you should immediately go to your nearest emergency room or dial 911 immediately.
You also agree to communicate only through Patient Portal for your own medical condition or for the medical condition of someone for whom you are authorized to make medical decisions. You agree that asking for advice on behalf of another person for whom you are not authorized to make medical decisions could potentially be harmful and is a violation of these Conditions of Use.
Also, GMC can only respond to the information you have provided. If the information you provide via Patient Portal is incomplete or inaccurate, it will not be possible for GMC to provide a complete or accurate response. You are responsible for any incomplete or inaccurate communications resulting from your submission of incomplete or inaccurate information to GMC.
No Guarantee of Continuous Access to Patient Portal
GMC cannot guarantee that use of Patient Portal will be free of interruptions. GMC regularly engages in routine maintenance of its computer systems, which may lead to inaccessibility of Patient Portal. In addition, factors beyond GMC’s control such as power outages may lead to inaccessibility. During these times if it is necessary to contact your health care provider you should do so by telephone or by an in-person visit.
No Guarantee of Completeness of Medical Record
Patient Portal is designed for your convenience and enhances your access to certain parts of your medical record. However, GMC does not guarantee that Patient Portal contains your complete medical record. In fact, there are certain types of medical information that will never appear in Patient Portal. If you want a complete copy of your medical record, you should contact your healthcare provider by telephone or in person. Never assume that your Patient Portal record is your complete medical record or insurance information.
Messages exchanged between you and your treating provider through Patient Portal become part of your official medical record. This information is confidential but may typically be released with your consent or by legal requirement. You agree to use appropriate discretion when sending online messages, particularly if you do not want the information to appear in the permanent medical record. If you do not want something to appear in the permanent medical record, do not submit it through Patient Portal.
Authorized Access by GMC
Any authorized person at GMC who would otherwise be authorized to access your medical records may be authorized to view information submitted through your Patient Portal account.
Your Responsibility to Review Patient Portal Messages in a Timely Manner
Messages sent to you via Patient Portal might contain information that is important to your health and medical care. It is your responsibility to monitor these messages in a timely manner. You are liable for any loss, injury or claims of any kind resulting from messages that you fail to read in a timely manner.
As a user of Patient Portal, you should be aware that you will be notified via e-mail when there is new medical information to be viewed on Patient Portal. This means that any person with access to your e-mail will be able to see this notification. This could include your family members, employer or anyone else who can access your e-mail account. Although no private medical information will be sent, the notification that new medical information is available may be information that you would not want others to know. Thus, you should take this into account when providing an e-mail address or using Patient Portal.
Proxy Access for Minors
All users of Patient Portal must be at least 18 years of age.
Children ages 0-13 may be able to be web-enabled if either a parent or legal guardian complete a Pediatric Patient Portal Enrollment Form available at the front desk. A different user name will be used for each child. Each child will be disabled within a month of turning 14-years of age.
Minors between the ages of 14-17 years will be web-enabled with their own email address only.
Changes to the Conditions of Use
GMC may modify or change these Conditions of Use at any time. Such modifications or changes become effective immediately when they are posted to Patient Portal. You agree to review these Conditions of Use frequently so that you will be familiar with them. You further agree that each time you use Patient Portal you are, by such use, consenting to the Conditions of Use applicable at that time.
Effective Date Conditional Use for Patient Portal: 09/12/2013.