THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU GATHERED BY TINY TRIPS PEDIATRIC DENTISTRYMAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
We at Tiny Trips Pediatric Dentistry (“Tiny Trips Pediatric Dentistry,” “we,” “our,” “us”) are dedicated to protecting your privacy. Like all other medical and dental practices, we are required by applicable federal and state laws to maintain privacy of your health information. We are also required to provide you with this notice (“Notice”) about our privacy practices, our legal duties, and how your health information may be handled in accordance with the Health Insurance Portability and Accountability Act of 1996 (also known by its acronym, "HIPAA"). This law protects information about you or your medical condition that identifies you as a patient (also referred to as "protected health information" or "PHI").
This Notice describes the privacy practices that will be followed by Tiny Trips Pediatric Dentistry and its employees who are permitted to use or disclose protected health information. We are required to abide by the terms of this Notice. We reserve the right to change this Notice and to make the revised Notice effective for all PHI currently in our possession as well as any PHI we receive in the future. Upon your request, we will provide you with any revised Notice and will post a copy of the current Notice on our website.
Each time you visit our Practice a record of your visit is created. Typically, this record contains your symptoms, examination and test results, diagnoses, treatment, and a plan for future care or treatment. This information, often referred to as your health or medical record, serves as a:
Understanding what is in your record and how your health information is used helps you to:
We, and the members of our team, typically work together in a clinically integrated setting to provide you with dental care. In such settings, HIPAA permits the use of a single Notice to describe how the Practice may use or disclose your health information. This Notice applies only to care provided to you through the Practice.
Our Responsibilities. This Practice is required to:
We are permitted by law to use or disclose your PHI for treatment, payment and our health care operations. Some examples of the ways in which we may use and disclose PHI for these purposes are described below. These examples are not meant to be exhaustive, but to describe the types of uses and disclosures that may be made by the Practice.
Protected health information obtained or created by a dentist, dental hygienist, dental assistant or other member of your health care team will be recorded in your medical record and used and disclosed to determine the course of treatment and coordinate your care. Your dentist may document a course of treatment in your record along with his or her expectations about your response to the treatment. Members of your health care team may then record the actions they carried out in relation to your care along with their observations of your response to treatment. In that way, the treatment team can collaborate and understand how you are responding to treatment.
A bill may be sent to you or a third-party payer or we may share information with a person who helps pay for your care. The information on or accompanying the bill may include information that identifies you, as well as your diagnosis, procedures, and supplies used.
In order to improve our health care operations, we may use and share PHI in connection with many quality improvement activities. For example, members of the medical and clinical staff, members of the quality improvement team, and participants in our organized health care arrangements may use protected health information to assess the care and outcomes in your case and others like it. This information would then be used in an effort to continually improve the quality and effectiveness of the health care and services we provide.
We may also use and disclose your PHI for:
Uses and Disclosures of Protected Health Information Requiring an Opportunity for You to Agree or Object.
We may use or disclose your PHI without your authorization in limited circumstances when you are informed in advance of the use and disclosure and you have the opportunity to agree, object, or limit the use or disclosure. Unless you advise us of your objection to these uses, we will assume that the use of your PHI, as described in this section of the Notice, is acceptable to you. The types of uses or disclosures that require us to provide you with an opportunity to agree or object are set forth below.
Notification: We may use or disclose protected health information to notify, identify, or locate a family member, personal representative, or another person responsible for your care, to inform them of your health status or condition, or death (unless doing so is inconsistent with any prior expressed preference that is known to us). We may disclose your protected health information to a public or private entity authorized by law to assist in disaster relief efforts. If you are able and available to agree or object, we will give you the opportunity to object prior to making this notification. If you are unable or unavailable to agree or object, our health professionals will use their best judgment in communications with your family and others.
Communications with Family: Health professionals, using their professional judgment, may disclose to a family member, other relative, close personal friend or any other person you identify, protected health information relevant to that person's involvement in your care or payment related to your care. These disclosures will be limited to the protected health information that is directly relevant to the individual's involvement in your care or payment for your care.
Other Permitted and Required Uses and Disclosures That May Be Made Without Your Authorization, or Without an Opportunity for You to Object.
In certain circumstances, we may use or disclose your protected health information without your authorization or objection. Some of the types of uses or disclosures that may be made without your permission are listed below, but not every use or disclosure of this type is listed.
Required by Law. We may disclose your protected health information to the extent state, federal, or local law requires us to do so.
Military. If you are a member of the armed forces, we will release medical information about you as requested by military command authorities if we are required to do so by law or when we have your written consent. We may also release medical information about foreign military personnel to appropriate foreign military authority as required by law or with written consent.
Coroners, Medical Examiners and Funeral Directors: We may release PHI to a coroner or medical examiner for the purpose of identifying a deceased person, determining the cause of death, or for the coroner or medical examiner to perform other duties authorized by law. We may also disclose protected health information about our patients to funeral directors, as necessary to carry out their duties.
Workers Compensation. We may disclose your protected health information to the extent authorized by and to the extent necessary to comply with laws relating to workers compensation or other similar programs established by law that provide benefits for work-related injuries or illnesses.
Public Health. We may disclose your protected health information to public health authorities for public health purposes. Some examples include: (i) preventing or controlling disease, injury, or disability; (ii) reporting and prevention of abuse, neglect, or domestic violence; (iii) providing notice to a person who may be at risk for contracting or spreading a disease or condition and reporting disease or infection exposure; (iv) reporting reactions to medications or problems with products; (v) notifying people of recalls of products they may be using; or (vi) reporting to the FDA as permitted or required by law.
Correctional Institution. Under certain circumstances, we may disclose your PHI to a correctional institution or a law enforcement official having lawful custody of an inmate or other individual only as permitted or required by law.
Law Enforcement. We may disclose your PHI under limited circumstances for law enforcement purposes such as:
Health Oversight Activities. Federal law makes provision for your protected health information to be released to an appropriate health oversight agency or public health authority for oversight activities authorized by law. These oversight activities include, for example, government audits, investigations, inspections, and licensure activities. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws.
Judicial and Administrative Proceedings. We may disclose your protected health information in the course of any administrative or judicial proceeding, in response to a court or administrative order. In response to a subpoena, discovery request, or other process by someone else involved in the dispute, we may produce PHI when we receive assurances that efforts have been made to notify you and allow you to object to the request or to obtain an order protecting the information requested. We will limit the disclosure to the amount and type of information expressly required or authorized by the request.
Public Safety. We may disclose your health information to appropriate persons in order to prevent or lessen a serious and imminent threat to the health or safety of a particular person or the general public.
National Security and Intelligence Activities. We may disclose protected health information about you to authorized federal officials for intelligence, counter-intelligence, and other national security activities authorized by law, or other specialized government functions, for example, to protect the President, certain other governmental persons or foreign heads of state.
Uses and Disclosures of Protected Health Information Based Upon Your Written Authorization.
We may make other uses and disclosures of your PHI not covered by this Notice. Unless otherwise permitted or required by law, these uses and disclosures will be made only with your written authorization. Such uses and disclosure requiring patient authorization include the following:
Marketing. We must obtain your authorization prior to using or disclosing your PHI to make a communication about a product or service that encourages recipients of the communication to purchase or use the product or service, except as otherwise described in this Notice or as permitted by law.
Sale of PHI. We must obtain your authorization prior to engaging in any activities that constitute a sale of PHI not permitted under HIPAA.
If you give authorization for the Practice to use or disclose your PHI, you may revoke that authorization in writing at any time. If you revoke your authorization, we will no longer use or disclose PHI as had been permitted by your written authorization. However, we are unable to take back any disclosures we have already made in accordance with your authorization, and we are required to retain our records of the care that we provided to you.
Business Associates.
We may also disclose your PHI to third party "business associates" that perform various activities (e.g., billing, insurance, accounting and medical transcription services) for or on behalf of the Practice. Other examples include performance of certain laboratory services, as well as a copy service we use to make duplicate copies of your health record. Our business associates may use, disclose, create, receive, transmit or maintain PHI during the course of providing services to us. Like the Practice, business associates are required under HIPAA to protect your PHI. Nevertheless, we will also have a written agreement in place with business associates governing their use and/or disclosure and the measures it must take to protect the privacy of your PHI.
Preemption.
The federal health care Privacy Regulations generally do not "preempt" (or take precedence over) state privacy or other applicable laws that provide individuals greater privacy protections. As a result, to the extent state law applies, or other federal laws that are more stringent than HIPAA, we may be required to operate under that applicable privacy standard.
Although your health record is the physical property of the Practice, the PHI contained within your health record belongs to you. You have the following rights with respect to your protected health information.
You have the right to request that we restrict the use or disclosure of protected health information about you for treatment, payment or health care operations. You also have the right to request a limit on the protected health information we disclose about you to someone who is involved in your care or the payment for your care, like a family member or friend. For example, you could ask that we not use or disclose information about a medication prescribed to you to a family member. However, the Practice is not required to agree to the restrictions that you may request. If we agree, we will comply with your request unless the information is needed to provide you emergency treatment, or as otherwise permitted by law. We will notify you if we do not agree to a requested restriction.
Notwithstanding the above, you may request, and unless otherwise required by law, the Practice must honor your request, to restrict disclosure of PHI to a health plan (e.g., insurance company) for payment or health care operations if you or someone other than the health plan paid in full for the related items or services (i.e., out-of-pocket). Your request only applies to the Practice. If you want subsequent providers to abide by the same restriction, you must request the restriction from them and pay out-of-pocket for items or services provided by them. The Practice is not responsible for notifying subsequent healthcare providers of your request for restrictions on disclosures to health plans for items or services you pay to us out-of-pocket. This practice also applies for the health care organizations listed on page 2 of this Notice of Privacy Practices. To restrict disclosure of PHI to a health plan for items or services paid out-of-pocket to any of the health care organizations listed on page 2 of this Notice of Privacy Practices, you must make that request to the health care organization who provided those services listed on this Notice of Privacy Practices.
To request restrictions, you must make your request in writing to the Practice pursuant to the contact information can be found at the end of this notice. In your request, you must tell us:
You have the right to request that we communicate with you about medical/dental matters by alternate means or at an alternate location. For example, you may ask that we only contact you at your office or only by mail. If your request is reasonable, we will accommodate it. To request alternative means or locations for confidential communications, you must make your request in writing to the Practice. Your request must specify how and/or where you wish to be contacted.
You have the right to inspect and receive a copy of your PHI that may be used to make decisions about your care. This information includes medical records, but does not include information compiled in reasonable anticipation of, or use in, a civil, criminal, or administrative action or proceeding, or protected health information that is subject to a law prohibiting your access to such information.
To inspect and obtain a copy of protected health information, you must submit your request in writing to Tiny Trips Dental, Attn: Correspondence and you may specify that you want your PHI in an electronic format. The Practice will provide you with a copy in a readable electronic format that the Practice is readily able to produce. If you request a copy of the information, we may charge you a reasonable fee for the costs of labor for copying, mailing, or other supply costs associated with your request.
We may deny your request to inspect and obtain a copy in certain limited circumstances. If you are denied access to protected health information, you may be able to request a review of that decision. Depending on the circumstances, the decision to deny access may or may not be reviewable. If you make such a request, we will notify you as to whether the decision is reviewable.
You have a right to request that the Practice amend your health information that is used to make decisions about you if you believe that it is incorrect or incomplete. You have the right to request an amendment for so long as the Practice keeps the information.
To request an amendment, your request must be made in writing and submitted to the Practice: Attn: Correspondence. In addition, we will require you to provide us with a reason for your request.
We may deny your request for amendment if it is not in writing. We may also deny your request if it does not include a reason to support the request. In addition, we may deny your request, in whole or in part, if you ask us to amend information that:
If your request to amend your medical information is denied, you may file a statement of disagreement with us. You also have a right to a copy of our rebuttal statement, if we choose to prepare one.
You have a right to receive an accounting of the disclosures of your protected health information made by the Practice. However, the Practice does not have to account for the disclosures made:
To request an accounting of disclosures, you must submit your request in writing to the Practice. Your request must include a time period of no longer than six (6) years for which you are requesting an accounting of disclosures. We will provide an accounting for the period you request unless the period or right to receive the accounting is or may be limited under HIPAA. The first accounting you request within a 12-month period will be free. For additional requests, we may charge you for the costs of providing the accounting.
You have the right to receive notice of any breach (i.e., the unauthorized use or disclosure) of your unsecured PHI, as defined under HIPAA.
You have a right to a paper copy of this Notice of Privacy Practices. Paper copies are available at any patient registration area of the Practice.
An electronic copy of this notice is posted on the Internet
Complaints or Questions. If you believe your privacy rights have been violated, you can file a complaint with the Practice at:
Attn: Dr. Jian Lee
Tiny Trips Pediatric Dentistry
2100 Old Farm Road
Ste. 1
Frederick, MD 21702
Call: (301) 631-5970
Complaints may also be made to:
Office of the Secretary, Department of Health and Human Services
200 Independence Ave. SW
Washington, D.C. 20201
There will be no retaliation for filing a complaint.
For More Information. If you have questions and would like additional information, you may contact the Practice at the address and telephone number listed above.
Quick Links
Our Hours
