Privacy Policy
CHC Wellbeing Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
What information do we collect?
We collect various types of information from you and other sources, such as:
- Information that you provide to us when you register for our portal, such as your name, email, phone number, date of birth, gender, and password.
- Information that you provide to us when you complete screenings, health risk appraisals, surveys, questionnaires, or other forms on our portal, such as your height, weight, blood pressure, cholesterol, glucose, smoking status, alcohol consumption, physical activity, stress level, medical history, family history, medications, allergies, and health goals.
- Information that we receive from third-party services that you connect to our portal, such as Google Health Connect, and Apple Health. These services may provide us with information such as your heart rate, steps, calories, sleep, blood oxygen, electrocardiogram, and other health metrics. You may request the removal of the information collected through these services in writing to the address below.
- The use of information received from Google Health Connect will adhere to the Health Connect Permissions Policy, including the Limited Use Requirements.
- The use of information received from Apple Health will adhere to the Apple Platform Security Policy.
- Information that we receive from your health care providers, such as your doctors, nurses, pharmacists, laboratories, and insurance companies. These providers may share information such as your diagnoses, treatments, prescriptions, test results, claims, and coverage.
OUR LEGAL DUTY
CHC Wellbeing is required by applicable federal and state law to maintain privacy of your protected health information (“PHI”). This notice describes our privacy practices and your rights concerning your PHI. We must follow the privacy practices that are described in this notice while it is in effect. This notice takes effect September 2022 and will remain in effect until we replace it.
We reserve the right to change our privacy practices and the terms of this notice at any time, provided such changes are permitted by applicable law. We reserve the right to make the changes in our privacy practices and the new terms of our notice effective for all PHI that we maintain, including PHI we created or received before we made the changes. Before we make a significant change in our privacy practices, we will change this notice and provide you with a revised copy of this notice.
We are also required to notify you if we become aware of any breach that may have compromised the privacy or security of your PHI. We will also notify you if we are unable to agree to restriction on our use and/or disclosure of your PHI that you request.
You may request a copy of our notice at any time. For more information about our privacy practices, or additional copies of this notice, please contact the CHC Wellness Privacy Officer using the information listed at the end of this notice.
OTHER PERMISSIBLE OR REQUIRED USES OR DISCLOSURES
Notifying or Communicating with Persons Involved in your Care: We may use or disclose health information to notify, or to assist in notification of (including identifying or locating) a family member, your personal representative or another person responsible for your care of your location and general condition. If you are present, then prior to use or disclosure of your health information, we will provide you with an opportunity to object to such uses or disclosures. In the event of your incapacity or emergency circumstances, we will disclose health information based on a determination using our judgment disclosing only health information that is directly relevant to the person’s involvement in your healthcare. CHC Wellbeing will not disclose your PHI to your family members, personal representative or any other person as described in this paragraph if you object to such disclosure. Please notify the CHC Wellbeing Privacy Officer at the number provided below if you object to such disclosures.
Bill for Services: We can use and share your health information to bill and get payment from health plans or other entities.
Business associates: Some activities of CHC Wellbeing are provided on our behalf through contracts with business associates. Examples of when we may use a business associate include coding and claims submission performed by a third-party billing company, consulting and quality assurance activities provided by an outside consultant, billing and coding audits performed by an outside auditor, and other legal and consulting services provided in response to billing and reimbursement issues which may arise from time to time. When we enter into contracts to obtain these services, we may need to disclose your health information to our business associate so that the associate may perform the job which we have requested. To protect your health information, however, we require our business associate to appropriately safeguard your information.
Any use or disclosure of your PHI that is not listed above will be made only with your written authorization. You may revoke such authorization at any time, as provided by 45 C.F.R. § 164.508(b)(5).
HOW ELSE CAN WE USE OR SHARE YOUR HEALTH INFORMATION?
We are allowed or required to share your information in other ways – usually in ways that contribute to the public good, such as public health and research. We have to meet many conditions in the law before we can share your information for these purposes.
For more information see: https://www.hhs.gov/hipaa/for-individuals/guidance-materials-for-consumers/index.html
Help with public health and safety issues
We can share health information about you for certain situations such as:
- Preventing disease
- Helping with product recalls
- Reporting adverse reactions to medications
- Reporting suspected abuse, neglect, or domestic violence
- Preventing or reducing a serious threat to anyone’s health or safety
Do research
We can use or share your information for health research.
Comply with the law
We will share information about you if state or federal laws require it, including with the Department of Health and Human Services if it wants to see that we’re complying with federal privacy law.
Respond to organ and tissue donation requests
We can share health information about you with organ procurement organizations.
Work with a medical examiner or funeral director
We can share health information with a coroner, medical examiner, or funeral director when an individual dies.
Address workers’ compensation, law enforcement, and other government requests
We can use or share health information about you:
- For workers’ compensation claims
- For law enforcement purposes or with a law enforcement official
- With health oversight agencies for activities authorized by law
- For special government functions such as military, national security, and presidential protective services
Respond to lawsuits and legal actions
We can share health information about you in response to a court or administrative order, or in response to a subpoena.
YOUR RIGHTS
You have the right to:
- Request an electronic or paper copy of your health record. You can ask to see or get an electronic or paper copy of your medical record and other health information we have about you. We will provide a copy or a summary of your record and may charge you a reasonable fee as allowable under applicable state law. Please provide a written request to the Privacy Officer.
- Request restrictions on the use and disclosure of your PHI. If you pay for a service entirely out-of-pocket, you may request that information regarding the service be withheld and not provided to a third-party. We are obligated by law to abide by such restriction. If you wish to request a restriction on the use and disclosure of your PHI, please provide a written request describing your requested disclosure to the Privacy Officer. We will notify you of our decision regarding the requested restriction.
- Request that we amend your medical record, to the extent that such amendments are permissible under federal regulations.
- Request and receive an accounting of disclosures made of your health information, except for disclosures made for the purpose of treatment, payment, health care operations and certain other purposes if such disclosures were made through a paper record or other health record that is not electronic, as set forth in federal regulations.
- Receive communications regarding your health information in a specific way or by alternative means. For example, at your request contact you via an alternative phone number or mail to a different address.
- Receive notification if your unsecured (i.e. identifiable) PHI has been accessed by unauthorized individuals if we determine that there is a potential risk of harm as a result of the unauthorized access.
- If you execute any authorization(s) for the use and disclosure of your health information, you have the right to revoke such authorization(s), except to the extent that action has already been taken in reliance on such authorization.
- Refuse to undergo a genetic test or other genetic service requested by your health insurer or offered by CHC Wellbeing.
Receive a copy of this privacy notice
You can request a copy of this notice at any time, even if you have agreed to receive the notice electronically. We will provide you with a paper copy when requested.
QUESTIONS AND CONCERNS
If you want more information about our privacy practices or have questions or concerns about your company sponsored program, please contact the CHC Wellbeing Privacy Officer in writing at the following address:
CHC Wellbeing, Inc.
Attn: Privacy Office
8755 West Higgins Road Suite #300
Chicago, IL 60631
If you are concerned that we may have violated your privacy rights, or you disagree with a decision we made about access to your health information or in response to a request you made to amend or restrict the use of your health information, you may write to us using the contact information listed at the end of this notice. You also may submit a written complaint to the U.S. Department of Health and Human services. We support your right to the privacy of your PHI. We will not retaliate in any way if you choose to file a complaint with us or with the U.S. Department of Health and Human Services.