Zarina Pharmacy HIPAA Privacy Policy Effective Date: 10/17/2024
Purpose:
Zarina Pharmacy is committed to maintaining the privacy of Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA). This Privacy Policy outlines the procedures we follow to protect patient information and ensure confidentiality.
1. Definition of Protected Health Information (PHI)
PHI refers to any information that can be used to identify a patient and relates to their health condition, the provision of health care, or payment for health care services. This includes, but is not limited to:
- Name, address, phone number
- Prescription history
- Insurance information
- Payment details
- Medical history
2. Use and Disclosure of PHI
Zarina Pharmacy may use and disclose PHI under the following circumstances:
A. For Treatment
We may use PHI to provide and coordinate the pharmacy services you receive. This includes sharing necessary information with other health care providers (e.g., doctors, hospitals) involved in your care.
B. For Payment
We may use and disclose PHI to bill and collect payment for the health care services provided. This includes communicating with insurance companies and determining your eligibility for coverage.
C. For Health Care Operations
We may use and disclose PHI to ensure the efficient operation of our pharmacy. This includes activities such as internal audits, quality assurance, and staff training.
D. For Legal and Compliance Purposes
We may disclose PHI as required by law, including:
- To comply with legal obligations (e.g., reporting abuse or neglect)
- In response to a court order, subpoena, or government investigation
- For public health and safety reasons, such as reporting infectious diseases or adverse medication reactions
3. Patient Rights Regarding PHI
Patients have the following rights concerning their PHI:
A. Right to Access
Patients may request to review or obtain a copy of their health records. We may charge a reasonable fee for providing copies.
B. Right to Request Amendments
Patients may request that we correct or update their PHI if it is incomplete or inaccurate.
C. Right to Request Restrictions
Patients may request limitations on how their PHI is used or shared. While we will review these requests, we are not legally obligated to agree to all restrictions.
D. Right to Confidential Communications
Patients may request that we communicate with them through alternative means (e.g., using a specific phone number or mailing address).
E. Right to an Accounting of Disclosures
Patients may request an accounting of the times their PHI has been disclosed for reasons other than treatment, payment, or health care operations.
4. Use of PHI for Marketing and Fundraising
Zarina Pharmacy will not use or disclose PHI for marketing purposes without the patient’s express written authorization. Similarly, we will not sell PHI to third parties. We may contact patients about Zarina Pharmacy’s services, such as reminders about refills or health-related programs, but these communications are not considered marketing under HIPAA.
5. Safeguards to Protect PHI
Zarina Pharmacy has implemented administrative, physical, and technical safeguards to protect PHI from unauthorized access, use, or disclosure. These include:
- Administrative Safeguards: Policies and training to ensure employees handle PHI
- Physical Safeguards: Secure storage of paper records and restricted access to work
- Technical Safeguards: Use of encryption, firewalls, and secure electronic communication systems.
6. Breach Notification
In the event of a breach involving PHI, Zarina Pharmacy will notify affected individuals and relevant authorities as required by law. This notification will occur promptly, describing the nature of the breach and the steps taken to mitigate the situation.
7. Business Associates
Zarina Pharmacy may contract with third-party service providers, known as Business Associates, to help us carry out health care operations. These Business Associates are required to sign agreements ensuring that they also comply with HIPAA standards to protect PHI.
8. Changes to the Privacy Policy
Zarina Pharmacy reserves the right to change this Privacy Policy at any time. If significant changes are made, we will notify patients by posting the updated policy in our pharmacy and on our website. Changes will apply to all PHI, including information collected prior to the revision.
9. Filing a Complaint
If you believe your privacy rights have been violated, you may file a complaint with Zarina Pharmacy or with the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.
To file a complaint, please contact: Zarina Pharmacy
3425 Highway 6 South, Suite 110B
Sugar Land, TX 77478
Ph. Number: (832)-886-4296
Fax Number: (832)-886-4298
10. Contact Information
If you have any questions about this Privacy Policy or how your PHI is used, please contact us:
Zarina Pharmacy 3425 Highway 6 South, Suite 110B
Sugar Land, TX 77478
Ph. Number: (832)-886-4296
Fax Number: (832)-886-4298
This policy is designed to comply with HIPAA and other applicable federal and state laws.
This HIPAA Privacy Policy provides the necessary framework for Zarina Pharmacy to protect patient information while meeting legal obligations. Be sure to review it periodically with a legal professional to ensure ongoing compliance with any new regulations.