Comprehensive Counseling Solutions, Inc.
Privacy Practices Notice
This privacy practice notice describes the privacy practices of the Comprehensive Counseling Solutions, Inc. (CCS), which includes CCS facility locations. The term “CCS Site” refers to all of the facilities, both individually and collectively. When your protected health information is used or disclosed, we are required by law to abide by the terms of this privacy notice, or any other Notice of Privacy Practices that is currently in effect at the time of the information’s use or disclosure, and to provide you with notice of our legal duties and privacy practices with respect to your protected health information. You may direct any questions about CCS Site privacy practices to the CCS Corporate Office at 770-933-6289.
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
I. Privacy and Confidentiality
As a mental health and substance treatment provider we are covered by two distinct federal laws that protect the privacy and confidentiality of information about your health, health care, and payment for services related to your health.
- Confidentiality of Alcohol and Drug Abuse Patient Information (42 C.F.R. Part 2):
42 C.F.R. Part 2 protects health information that identifies you as being a patient in a drug or alcohol program, or as having a drug or alcohol problem. This includes persons who have applied for, participated in, or received an interview, counseling, or any other service from an alcohol or drug abuse program. This means that we may not acknowledge to a person outside of the program whether you are a current or former patient, nor can we disclose any information identifying you as an alcohol or drug abuser (except under certain conditions which are outlined in this notice).
- Health Insurance Portability and Accountability Act (HIPAA) Privacy Regulations (45 C.F.R. Parts 160 and 164): HIPAA protects all health information which identifies an individual, not just drug and alcohol related information.
II. Protected Health Information Uses and Disclosures WITH your Consent
We may use or disclose your protected health information if you have signed a consent or authorization form that meets requirements set forth in 42 C.F.R. Part 2 and HIPAA. You may revoke your information release authorization at any time, except to the extent that we have already taken action upon the authorization. If you are currently receiving care and wish to revoke your authorization, you will need to deliver a written statement to your counselor or the facility Business Office. If you have been discharged, your will need to deliver a written statement to the attention of the facility Business Office.
It is important to note that a court with appropriate jurisdiction (or other authorized third party) may request or compel you to sign an information release authorization.
III. Protected Health Information Uses and Disclosures WITHOUT your Consent
We may use or disclose your protected health information (including information obtained when you are applying for or receiving services for drug or alcohol abuse) under the conditions indicated below, even if you have not signed a consent or authorization form.
a.) Internal Program Communications/Treatment
Program staff may use or disclose your protected health information to other staff within the program, or to an entity having direct administrative control over that program, if the recipient needs the information in connection with duties that arise out of the provision of mental illness, alcohol or drug abuse diagnosis, treatment, referral or coordination of care. For example, program counselors may consult among themselves if their work facilitating your mental health, alcohol or drug treatment so requires.
b.) Health Care Operations (The examples below are for illustration only and do not constitute an exclusive list of all of the potential uses and disclosures that may be made for health care operations). Program staff may use or disclose your protected health information for health care operations, such as internal administration and planning, that improve the quality and effectiveness of the care provided. We may disclose information to government agencies that regulate a program (state licensure or certification agencies,) private agencies that provide third party payments, and peer review organizations that conduct program audits or evaluations (DBHDD or CARF Organizations). Any reports compiled as a result of these activities will not disclose, directly or indirectly, any individual patient identity. We may disclose your protected health information to an agent or agency which provides services to CCS under a Qualified Service Organization Agreement. This agreement includes a statement in which the agent or agency agrees to abide by applicable federal law and related regulations (42 C.F.R. Part 2 and HIPAA).
c.) Payment for Care
We may disclose your protected health information to private agencies that provide third party payments. A group health plan, or health insurance issuer or HMO may disclose protected health information to the sponsor of the plan.
d.) Medical Emergencies
We may disclose your protected health information to medical personnel to the extent necessary to treat a condition which poses an immediate threat to your health and which requires immediate medical intervention.
We may disclose to a parent or guardian, or other person authorized under state law to act on behalf of a minor, those facts about a minor which are relevant to reduce a threat to the life or physical wellbeing of the minor or any other individual, if the facility Program Director judges that the threat will be reduced by communicating the relevant facts to such a person.
f.) Incompetent or Deceased Patients
Legal guardians appointed by the court may sign consent forms on behalf of an individual who has been declared incompetent by a court. If a patient has not been declared incompetent by the court, but the Program Director determines that his or her medical conditions prevents “knowing or effective action on his or her own behalf,” the Program Director may authorize disclosures without patient consent for the sole purpose of obtaining payment for services from a third party payer.
Protected patient information of deceased patients may be disclosed through authorization of a personal representative, guardian, or other person authorized by state law in accordance with 42 C.F.R. Part 2.
We may disclose protected health information to a coroner, medical examiner, or other authorized persons under laws requiring the collection of death or other vital statistics, or which permit inquiry into the cause of death.
g.) Judicial and Administrative Proceedings
Your protected health information may be disclosed in response to a court order that meets the requirements of 42 C.F.R. Part 2 concerning Confidentiality of Alcohol and Drug Abuse Patient Records.
h.) Commission of a Crime on Facility Premises or Against Program Personnel
Your protected health information may be disclosed to a law enforcement agency if you commit a crime or threaten to commit a crime on program premises or against program personnel. The information disclosed will be limited to information regarding the circumstances of the incident, the suspect’s name, address, last known whereabouts, and status as a patient in the program.
h.) Child Abuse
Federal laws and regulations do not protect any information about suspected child abuse or neglect from being reported under state law to appropriate state or local authorities.
i.) Duty to Warn
If a program learns that a patient has made a specific threat of serious physical harm to another individual or individuals, the program will take appropriate steps to protect the intended victim(s) against such danger. This will include carefully considering options supported by 42 C.F.R. that would permit a disclosure to the intended victim(s) or appropriate authorities.
IV. Your Individual Rights
- Right to Receive Confidential Communications: We will accommodate reasonable requests by you to receive communications of your protected health information by alternative means or at alternative locations. For example, you may request that communications be emailed or sent to a different location other than your home.
- Right to Request Disclosure Restrictions: You have the right to restrict uses or disclosures of your protected health information by refusing to sign an information release authorization, or by amending the description of information to be disclosed. At your request, we will not disclose health information to your health plan, if the disclosure is for payment of a health care service or item for which you have paid CCS in full (out of pocket). You also have the right to request additional restrictions on the use and disclosure of your protected health information for treatment, payment, and health care operations. While we will carefully consider your requests for these additional restrictions, we are not required to agree to them. If you are currently receiving alcohol or drug treatment services and wish to request additional restrictions, please contact your counselor. Once you are no longer receiving services, please contact the Business Office at the facility from which you received your services.
- Right to Inspect and Copy Your Health Information: You have the right to request access to your CCS patient record so that you may inspect and/or obtain copies of the record. Under limited circumstances we may deny you access to a portion of your records. You can make your request through your counselor or the Business Office of the facility in which you received services. We will act upon your request for access no later than thirty days after its receipt. We may impose a fee for each page copied. You will be informed of the proposed fee prior to any copies being made. If you disagree with a decision made about access to your records, please contact the CCS Privacy Officer at 770-933-6289.
- Right to Amend Your Record: You have the right to request an amendment to your health information kept in your patient record. Under certain circumstances, CCS may deny your request for amendment. If this occurs, CCS will notify you of this denial as outlined in the HIPAA regulations. If your request for amendment is accepted, you will be notified of the acceptance and a copy of the amendment will become a permanent part of your patient record. An amendment may be made by identifying the affected record(s) and appending or providing a link to the location of the amendment. We will work with you to obtain your consent so that we may notify any relevant persons with whom the amendment needs to be shared. You can make your request for any amendment through your counselor or the Business Office of the facility in which you received services.
- Right to Receive an Accounting of Disclosures: Upon request, you may obtain an accounting of disclosures ofyour protected health information made during the five years prior to the date of your request. This does not include disclosures to you, those authorized by your written consent, or those related to your treatment, payment for services, or our health care operation.
- Right to Breach Notification: You will be notified in the event we discover a breach has occurred in your unsecured protected health information, or if we have reason to believe that your unsecured protected health information has been accessed, acquired, or disclosed as a result of the breach. Notification will be made no more than 60 days after the discovery of the breach, unless it is determined by a law enforcement agency that the notification should be delayed.
- Right to Receive a Paper Copy of this Notice: Upon request, we will provide you with a paper copy of this notice.
V. Effective Date and Duration of this Notice:
This notice is effective on March 1, 2014.
IV. Your Individual Rights
CCS Substance Abuse Treatment E-PolicyThe purpose of this statement is to tell you how CCS may use the personally identifiable information that it collects from you when you use ccs-lsu.com. Assuring security and confidentiality are hallmarks of CCS. Here is how we pledge to protect your privacy and ensure the highest level of security possible while on our Web site:
CCS does NOT:
- Provide or release names, email addresses, or postal addresses to any third party (you should be aware, however, that certain state and federal laws may require that we report certain information from time to time)
- Track or report on any individual registrant’s activity on the site CCS uses the data to:
- Ensure you are sent the information you have requested
- Measure global, not individual site activity
- Develop new Web site services
- Offer more information on popular topics