United Medical Direct (UMD) – Notice of Privacy Practices

This notice describes how information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Overview

We may use and share your information to:

  • Assist in treating you
  • Bill for services provided
  • Manage our organization
  • Comply with the law
  • Help with public health and safety issues

We are required to:

  • Maintain the privacy and security of your health information
  • Inform you if a breach occurs that may have compromised the privacy or security of your information
  • Provide you with a notice of our legal duties and privacy practices regarding the information we collect and maintain about you
  • Abide by the terms of this notice
  • Notify you by mail, upon your request, if UMD’s health information practices change
  • Obtain your written authorization for any uses or disclosures of your health information not described in this notice. You may revoke the authorization at any time, except to the extent that action has already been taken.
  • We will provide you with a description of the information that we shared, who we shared it with, and why we shared it.
  • Under the law, we are not required to include in the list the occasions that we shared your health information for the purposes of treatment, payment or healthcare operations.

How we may use and share your information to:

  • Bill for services rendered to you: For example, a bill may be sent to you or a third party payer. The bill may include information that identifies you and the tests that were performed.
  • Manage our organization: For example, we may use information about you to assess the timely reporting of the results of your test(s); this information will then be used in an effort to continually improve the quality and effectiveness of the service we provide.
  • Comply with the law: For example:
    • We may disclose your health information to public health or legal authorities charged with preventing or controlling disease, injury, or disability or to avert a serious threat to the health or safety of a person or the public.
    • To comply with laws relating to workers compensation or other similar programs established by law.
    • We may disclose your health information for law enforcement purposes as required by law or in response to a valid subpoena.
    • Business associates: We may provide your PHI to other companies or individuals that need the information to provide services to us. These other entities, known as “business associates”, are required to maintain the privacy and security of PHI. For example, we may provide information to companies that assist us with billing of our services. We may also use an outside collection agency to obtain payment when necessary.

    We are required to:

    Maintain the privacy and security of your health information

    Under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), CPL is required by law to maintain the privacy of health information that identifies you, called protected health information or “PHI”. UMD will make reasonable efforts to ensure the confidentiality of your PHI, as required by statute and regulation.

    Inform you if a breach occurs that may have compromised the privacy or security of your information

    UMD is required to provide patient notification if it discovers a breach of unsecured PHI unless there is a demonstration, based on a risk assessment, that there is a low probability that the PHI has been compromised. You will be notified without unreasonable delay and no later than 60 days after discovery of the breach.

    Provide you with a notice of our legal duties and privacy practices regarding the information we collect and maintain about you

    UMD is required to provide you with this notice of our legal duties and privacy practices. A copy of our privacy practices is available on our website, www.unitedmedicaldirect.com.

    Abide by the terms of this notice

    UMD is required by law to maintain the privacy of your PHI and to abide by all of the terms of this notice. Notify you by mail, upon your request, if UMD’s health information practices change

    UMD may change the content of this notice of privacy practices at anytime because of operational or regulatory requirements. The changes will apply to all information UMD has about you. Whenever changes are made to this notice of privacy practices, they will be posted on our website. If you request, you may be notified by mail whenever these changes occur.

    Obtain your written authorization for any uses or disclosures of your health information not described in this notice. You may revoke the authorization at any time, except to the extent that action has already been taken For purposes not described above, UMD will ask for your authorization before using or disclosing your PHI. If you signed an authorization form, you may revoke it, in writing, at any time, except to the extent that UMD has already acted on any prior uses or disclosures previously authorized by you.