Notice of Privacy Practices for Health Care Clients
Effective: April 1, 2024
This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.
Your Privacy is Important to Us
Because we understand that medical information about you and your family members is personal, the County of Sonoma staff is committed to protecting your medical information.
This notice will tell you about the ways in which we may use and disclose medical information about you. This notice also describes your rights and certain obligations we have regarding the use and disclosure of your medical information.
We are required by a Federal Law called the Health Insurance Portability and Accountability Act (HIPAA) to:
- Make sure that medical information that identifies you is protected from inappropriate use and disclosure.
- Notify all affected individuals of a breach of unsecured protected health information.
- Give you this notice of our legal duties and privacy practices with respect to medical information about you; and
- Follow the terms of the notice that is currently in effect.
Changes to Our Privacy Practices
We reserve the right to change our privacy practices. We reserve the right to apply the revised practices to the medical information we already have about you as well as any information we receive after the revisions are made. A copy of the most current notice is posted where you receive care. The effective date of the notice is on first page of the Notice of Privacy Practices in the top right-hand corner.
Uses and Disclosures of Medical Information
We use and disclose medical information in a manner that complies with federal and state laws and regulations. For example, federal laws require an authorization to disclose medical information related to drug or alcohol abuse. State laws require an authorization to disclose medical information related to mental health records, HIV services, genetic testing information and medical information related to substance abuse. Disclosure of this information can only be made with your written authorization.
If you authorize the use and disclosure of your medical information, you may revoke that authorization, in writing, at any time. If you revoke your authorization, all uses or disclosures of your medical information for the purposes covered by your written authorization will cease unless we have already acted in reliance on your authorization. We are unable to take back any disclosures we have already made prior to revoking your authorization.
Disclosures to Parents as Personal Representatives of Minors
In most cases, we may disclose your minor child’s medical information to you. In some situations, however, we are permitted or even required by law to deny your access to your minor child’s medical information. An example of when we must deny such access, based on the type of health care, is when a minor who is 12 or older seeks care for a communicable disease or condition. Another situation when we must deny access to parents is when minors have adult rights to make their own health care decisions.
The Following Information Describes the Ways that We May Use and Disclose Your Medical Information.
For Treatment.
We may use and disclose your medical information to provide, coordinate and manage your health care and any related services. We may disclose your medical information to doctors, nurses, technicians, therapists, and county health care personnel who are involved in your care. Doctors and health care providers are permitted to share information about your care to help provide you with timely and appropriate health care services. For example, health care providers may share your medical information in order to coordinate the different things you need, such as prescriptions, lab work and x-rays.
For Payment.
We may use and disclose medical information about you so that the treatment and services you receive may be billed to and payment may be collected from you, or the health plan responsible for the payment of your health care services. Health Plans include your private insurance company, Medicare or MediCal. For example, we may need to give your health plan information about health care services you received so your health plan can pay your health care claim. We may also tell your health plan about a treatment you are going to receive in order to obtain prior approval or to determine benefit eligibility.
For Health Care Operations.
We may use and disclose medical information about you for health care operations. These uses and disclosures are necessary to make sure that you receive quality care. For example, we may use medical information to review our treatment and services and to evaluate the performance of our staff in caring for you. We may use and disclose medical information to tell you about or recommend possible treatment options or alternatives that may be of interest to you or to contact you as a reminder that you have an appointment for treatment or medical care. We may use and disclose your information within a health information exchange in order to make your health information more accessible to you. We may use and disclose medical information to tell you about health-related products or services that may be of interest to you.
Electronic Health Records.
We may use an electronic health record to store and retrieve your health information. One of the advantages of the electronic health record is the ability to share and exchange health information among personnel and other community health care providers who are involved in your care. When we enter your information into the electronic health record, we may share that information by using shared clinical databases or health information exchanges. We may also receive information about you from other health care providers in the community who are involved with your care by using shared databases or health information exchanges. If you have any questions or concerns about the sharing or exchange of your information, please discuss them with your provider.
Health Information Exchange.
We may share your health information electronically with other healthcare providers outside of our facility who are involved in your care. We may participate in a Health Information Exchange (HIE) for treatment purposes. The HIE is an electronic system that allows participating health care providers to share patient information in compliance with federal and state privacy laws. Unless you notify us otherwise that you object, we will share your health information electronically with your participating health care providers as necessary for treatment. Patient health information that requires a signed authorization for release will not be transmitted through the HIE without your consent.
If you would like to “opt out” of being included in a HIE at any time, you may contact the County at the address below.
Appointment Reminders.
We may use and disclose medical information to contact and remind you about appointments. If you do not answer our call, we make to the phone number you provide to us, we may leave the appointment reminder in a message. We may call you by name, in a waiting room, when we are ready to see you for your appointment.
As Required by Law.
We may use and disclose medical information about you as required by law. For example, we may be required to disclose information for the following purposes:
- For judicial and administrative proceedings pursuant to legal authority.
- To report information related to victims of abuse, neglect, or domestic violence.
- To assist law enforcement officials in their law enforcement duties.
Public Health Activities.
Your health information may be used or disclosed for public health activities such as assisting public health authorities or other legal authorities to prevent or control disease, injury, or disability, or for other public health oversight activities.
Health Oversight Activities.
Your health information may be disclosed for health oversight activities authorized by law, such as audits, investigations, and inspections. Health oversight activities are conducted by state and federal agencies that oversee government benefit programs and civil rights compliance.
Coroners, Medical Examiners, and Funeral Directors.
Health information may be disclosed to funeral directors or coroners to enable them to carry out their lawful duties.
Organ/Tissue Donation.
If you are an organ donor, we may disclose your health information to organizations that handle organ procurement or organ, eye, or tissue transplantation or to an organ donation bank, as necessary to facilitate such donation and transplantation.
Research.
We may use and disclose your health information for research purposes that are subject to special approval processes or when an institutional review board or privacy board has reviewed and approved the research proposal and established protocols to ensure the privacy of your health information.
Health and Safety.
Your health information may be disclosed to avert a serious threat to your health or safety or that of any other person pursuant to applicable law.
Active Military, Veterans, National Security, and Intelligence.
If you are or were a member of the armed forces, or part of the national security or intelligence communities, we will disclose your health information when required by military command or other government authorities.
Worker’s Compensation.
Your health information may be used or disclosed in order to comply with laws and regulations related to Worker’s Compensation.
Family and Friends.
We may disclose information about you to family members or friends if we can infer from the circumstances, based on professional judgment that you would not object.
Your Individual Rights Regarding Your Medical Information
If you have any questions about this notice or your individual rights,
you may contact the
County of Sonoma Privacy Officer at:
(707) 565–5703
DHS-Privacy&Security@sonoma-county.org
All requests to exercise your individual rights must be submitted in writing to:
County of Sonoma Privacy Officer
1450 Neotomas Avenue, Suite 200
Santa Rosa, CA 95405
Your Right to Inspect and Copy.
You have the right to inspect and to obtain a copy of the medical information maintained by the County of Sonoma, including results of lab tests performed by us. Usually, this includes medical and billing records, but may not include some mental health information.
Requests to inspect or obtain a copy of your medical information must be submitted in writing. If you request a copy of the information, you will be charged a fee for the costs of copying, mailing or other supplies associated with your request. We will notify you of the cost involved and you may choose to withdraw or modify your request before any costs are incurred.
We may deny your request to inspect and obtain a copy of certain medical information in very limited circumstances. A denial of a request to inspect or obtain a copy of your medical information can only be made by licensed health care professionals. If your request to inspect or obtain a copy of your medical information is denied, you may request that the denial be reviewed. Another licensed health care professional chosen by the Privacy Officer will review your request and the denial. The licensed health care professional conducting the review will not be the same licensed health care professional who denied your initial request. We will comply with the outcome of the review.
Your Right to Amend.
If you feel that medical information we have about you is incorrect or incomplete, you may submit a written request to us to amend the information. You have the right to request an amendment for as long as the County of Sonoma keeps the information.
You must provide the reason that you are requesting the amendment. We will deny your request for an amendment if it is not in writing or it does not include a reason to support the request. In addition, we may deny your request if you ask us to amend information that:
Was not created by us, unless the person or organization that created the information is no longer available to make the amendment.
- Is not part of the medical information kept by or for the County of Sonoma.
- Is part of the information which you would not be permitted to inspect and copy.
- Is accurate and complete.
Even if we deny your request for amendment, you have the right to submit a written addendum, not to exceed 250 words, with respect to any item or statement in your record you believe is incomplete or incorrect. If you clearly indicate in writing that you want the addendum to be made part of your medical record, we will attach it to your records and include it whenever we make a disclosure of the item or statement you believe to be incomplete or incorrect.
Your Right to an Accounting of Disclosures.
You have the right to request an accounting of disclosures we made of medical information about you. This list will not include disclosures made for the purposes of treatment, payment, or our health care operations, or disclosures that you authorized.
Your request must be in writing and include a time period. The time period may not be longer than six years and may not include dates prior to April 14, 2003. Your request should indicate in what form you want the list of disclosures (for example, on paper, electronically). The first list you request within a 12-month period will be free. For additional lists, we may charge you for the costs of providing the list. We will notify you of the cost involved and you may choose to withdraw or modify your request before any costs are incurred.
Your Right to Request Restrictions.
You have the right to request a restriction or limitation on the medical information we use or disclose about you for treatment, payment, or health care operations. We may not be required to agree to your request for restrictions in all situations. If we do agree, we will comply with your request unless the information is needed to provide you with emergency treatment or for the purposes of public health reporting or as required by law. We will accommodate all reasonable requests. If you wish to request a restriction or limitation on the use or disclosure of your medical information, your written request must tell us:
- What information you want to limit.
- Whether you want to limit our use, disclosure, or both.
- To whom you want the limits to apply, for example, disclosures to your spouse.
You also have the right to request to receive communications about your health care by alternate means or at alternative locations. If you wish to request that communications regarding your medical information, be provided using alternate means or at alternate locations, your written request must specify:
- How or where you wish to be contacted.
- The method you would like us to use to communicate with you, for example, the alternative address, phone number or email address.
Your Right to Receive a Paper Copy of This Notice.
You have the right to a paper copy of this notice. You may ask us to give you a copy of this notice at any time. You may request that a copy be sent to you by contacting the County of Sonoma Privacy Hotline at (707) 565-5703. Please state that you wish to receive a Notice of Privacy Practices and provide your name and mailing address. You may obtain a copy of this notice at our website https://sonomacounty.ca.gov/Health/PDF/notice-of-privacy-practices/
Your Right to File a Complaint.
If you believe that your privacy rights have been violated, you may file a complaint with the Privacy Officer or with the Secretary of the Department of Health and Human Services. The County of Sonoma will not retaliate against you for requesting access to your medical records, Notice of Privacy Practices, or any other HIPAA-related documents. Further, the County of Sonoma will not retaliate against you for filing or making us aware of any HIPAA complaints or grievances. To file a complaint with the County of Sonoma please submit your complaint to:
County of Sonoma Privacy Officer
1450 Neotomas Avenue, Suite 200
Santa Rosa, CA 95405