Notice of Policies and Practices to Protect the Privacy of Your Health Information

Jesika Austad Psy.D., LP

Dr. Jesika Austad, LLC

325 2nd Street Suite T Monument Colorado 80132

jesikaaustad@drjesika.com

651-800-1814

This notice describes how psychological and medical information about you may be used and disclosed and how you can get access to this information. Please review this notice carefully.

It is my policy to:
1. Fully comply with the requirements of the HIPAA General Administrative Requirements, the Privacy and Security Rules;
2. Provide every client who receives services with a copy of this Notice of Privacy Policies;
3. Ask the client to acknowledge receipt when given a copy of this Notice of Privacy Policies;
4. Ensure the confidentiality of all client records transmitted by facsimile;
5. Obtain from each client an informed Authorization for Release of Protected Health Information form when required.

I (Jesika Austad, Psy.D., LP) am required to follow all state and federal statutes and regulations including Federal Regulation 42 C.F.R. Part 2 and Title 25, Article 4, Part 14 and Title 25, Article 1, Part 1, CRS and the Health Insurance Portability and Accountability Act (HIPAA), 45 C.F.R. Parts 142, 160, 162 and 164, governing testing for and reporting of TB, HIV AIDS, Hepatitis, and other infectious diseases, and maintaining the confidentiality of PHI

I. Uses and Disclosures for Treatment, Payment, and Health Care Operations

I may use or disclose your protected health information (PHI), for treatment, payment, and health care operations purposes with your consent. To help clarify these terms, here are some definitions:

  • “PHI” refers to information in your health record that could identify you.
  • “Treatment, Payment, and Health Care Operations”

– Treatment is when I provide, coordinate or manage your health care and other services related to your health care. An example of treatment would be when I consult with another health care provider, such as your physician or care team.

– Payment is when I obtain reimbursement for your healthcare. Examples of payment are when I, or my contracted business associate (Therapy Notes), disclose your PHI to your health insurer to obtain reimbursement for your health care or to determine eligibility or coverage.

– Health Care Operations are activities that relate to the performance and operation of my practice. Examples of health care operations are quality assessment and improvement activities, business-related matters, such as audits and administrative services, and case management and care coordination.

  • “Use” applies only to activities within my office (i.e., residential facility, assisted living, transitional care center, memory care center, etc.), such as sharing, employing, applying, utilizing, examining, and analyzing information that identifies you.
  • “Disclosure” applies to activities outside of my office, such as releasing, transferring, or providing access to information about you to other parties.

II. Uses and Disclosures Requiring Authorization

I may use or disclose PHI for purposes outside of treatment, payment, or health care operations when your appropriate authorization is obtained. An “authorization” is written permission above and beyond the general consent that permits only specific disclosures. In those instances when I am asked for information for purposes outside of treatment, payment or health care operations, I will obtain an authorization from you before releasing this information. I will also need to obtain an authorization before releasing your psychotherapy notes. “Psychotherapy notes” are notes I have made about conversations during a private, group, joint, or family counseling session, which I have kept separate from the rest of your medical record. These notes are given a greater degree of protection than PHI. Special legal protections apply to HIV/AIDS related information and Alcohol and Drug use information, I will obtain a special written authorization from you before releasing information related to these. I will not share the following information unless you have given written permission; marketing purposes or sale of your information.

You may revoke all such authorizations (of PHI or psychotherapy notes) at any time, provided each revocation is in writing. You may not revoke an authorization to the extent that (1) I have relied on that authorization; or (2) if the authorization was obtained as a condition of obtaining insurance coverage, and the law provides the insurer the right to contest the claim under the policy.

III. Uses and Disclosures with Neither Consent nor Authorization

I may use or disclose PHI without your consent or authorization in the following circumstances:

  • Child Abuse: If I know or have reason to believe a child is being neglected or physically or sexually abused, or has been neglected or physically or sexually abused in the past, I must immediately report the information to the local welfare agency, police or sheriff’s department.
  • Abuse of a Vulnerable Adult: If I have reason to believe that a vulnerable adult is being or has been maltreated, or if I have knowledge that a vulnerable adult has sustained a physical injury which is not reasonably explained, I must immediately report the information to the appropriate agency in this county. I may also report the information to a law enforcement agency. “Vulnerable adult” means a person who, regardless of residence or whether any type of service is received, possesses a physical or mental infirmity or other physical, mental, or emotional dysfunction:

(i) that impairs the individual’s ability to provide adequately for the individual’s own care without assistance, including the provision of food, shelter, clothing, health care, or supervision; and

(ii) because of the dysfunction or infirmity and the need for assistance, the individual has an impaired ability to protect the individual from maltreatment.

  • Health Oversight Activities: My professional licensing Boards may subpoena records from me if they are relevant to an investigation it is conducting.
  • Judicial and Administrative Proceedings: If you are involved in a court proceeding and a request is made for information about the professional services that I have provided you and/or the records thereof, such information is privileged under state law and I must not release this information without written authorization from you or your legally appointed representative, or a court order. This privilege does not apply when you are being evaluated for a third party or where the evaluation is court-ordered. I will inform you in advance if this is the case.
  • Serious Threat to Health or Safety: If you communicate a specific, serious threat of physical violence against a specific, clearly identified or identifiable potential victim, I must make reasonable efforts to communicate this threat to the potential victim or to a law enforcement agency. I must also do so if a member of your family or someone who knows you well has reason to believe you are capable of and will carry out the threat. I also may disclose information about you necessary to protect you from a threat to commit suicide.
  • Worker’s Compensation: If you file a worker’s compensation claim, a release of information from myself to your employer, insurer, the Department of Labor and Industry or you will not need your prior approval.
  • In the Case of Grave Disability: I am required to report this to the appropriate authorities.

There are exceptions to this general rule of legal confidentiality. These exceptions are listed in the Colorado statutes, C.R.S. §12-43-218. You should be aware that provisions concerning disclosure of confidential communications does not apply to any delinquency or criminal proceedings, except as provided in C.R.S § 13-90-107. In addition, there may be other exceptions to confidentiality as provided by HIPAA regulations and other Federal and/or Colorado laws and regulations that may apply.

IV. Patient’s Rights and Therapist’s Duties

 Patient’s Rights:

  • Right to Request Restrictions –You have the right to request restrictions on certain uses and disclosures of protected health information. However, I am not required to agree to a restriction you request.
  • Right to Receive Confidential Communications by Alternative Means and at Alternative Locations – You have the right to request and receive confidential communications of PHI by alternative means and at alternative locations. (For example, you may not want a family member to know that you are seeing me. On your request, I will send your bills to another address).
  • Right to Inspect and Copy – You have the right to inspect or obtain a copy (or both) of PHI (and psychotherapy notes) in my mental health and billing records used to make decisions about you for as long as the PHI is maintained in the record. I may deny your access to PHI under certain circumstances, but in some cases, you may have this decision reviewed. On your request, I will discuss with you the details of the request and denial process.
  • Right to Amend – You have the right to request an amendment of PHI for as long as the PHI is maintained in the record. I may deny your request. On your request, I will discuss with you the details of the amendment process.
  • Right to an Accounting – You generally have the right to receive an accounting of disclosures of PHI for which you have neither provided consent nor authorization (as described in Section III of this Notice). On your request, I will discuss with you the details of the accounting process.
  • Right to a Paper Copy – You have the right to obtain a paper copy of the notice from me upon request, even if you have agreed to receive the notice electronically.
  • Choose someone to act for you – If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your health information.
  • File a complaint – You can file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights by sending a letter to 200 Independence Avenue, S.W., Washington, D.C. 20201, calling 1- 877-696-6775, or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/. You may also file a complaint with the Colorado Department of Regulatory Agencies, Division of Professions and Occupations, Mental Health Section; 1560 Broadway, Suite 1350, Denver, Colorado, 80202, 303-894-2291; DORA_Mentalhealthboard@state.co.us. Please note that the Department of Regulatory Agencies may direct you to file your complaint with the U.S. Department of Health and Human Services Office for Civil Rights listed above and may not be able to take any action on your behalf. No retaliation will be taken against you for the filing of a complaint.

Therapist’s Duties:

  • I am required by law to maintain the privacy of PHI and to provide you with a notice of my legal duties and privacy practices with respect to PHI.
  • I reserve the right to change the privacy policies and practices described in this notice. Unless I notify you of such changes, however, I am required to abide by the terms currently in effect.
  • If I revise my policies and procedures, I will give to you or send to you via postal mail a copy of the revised notice of policies and practices to protect the privacy of your health information.

V. Effective Date and Changes to Privacy Policy

This notice is effective January 25, 2021. I reserve the right to change the terms of this notice and to make the new notice provisions effective for all PHI that I maintain. I will provide you with a revised notice in person, online via the secure client portal, or by US postal mail.