Notice of Privacy Practices

Prime Concierge Physicians is required by law to protect the privacy of your health information, to give you this notice describing our legal duties and privacy practices, and to follow the terms of the notice currently in effect.

This notice applies to all of the health information we create or receive about you — including the records our physicians and staff create, information we receive from other providers who have treated you, and information we receive from laboratories, imaging centers, pharmacies, and health plans. It applies to our physicians, employees, contractors, and anyone else involved in your care at our practice.

In this notice, "health information" means protected health information: information that identifies you and relates to your past, present, or future health, treatment, or payment for care.

For treatment. We use your health information to provide and coordinate your medical care. For example, your physician reviews your history and test results to make a diagnosis; we share information with a specialist we refer you to; we send prescriptions electronically to your pharmacy; and we share information with a hospital or urgent care center that is treating you.

For payment. We may use and share your health information to obtain payment for the care we provide. For most of our members this is limited, because membership is paid directly to the practice rather than billed to insurance. However, if you ask us to send a claim or supporting records to your health plan, or if we bill for a service outside your membership, we may share the information needed to do so. We may also share information with your plan to confirm coverage for a test, medication, or referral.

For health care operations. We may use and share your health information to run our practice and keep the quality of care high. Examples include reviewing our own clinical work, training physicians and staff, scheduling, maintaining our medical record system, resolving a complaint, conducting an internal audit, and working with our attorneys, accountants, and consultants.

Appointment reminders and care communications. Because our members have direct access to their physician, we may contact you by phone, text message, email, or secure message to remind you of an appointment, follow up after a visit, share a test result, discuss a treatment alternative, or tell you about a health-related service that may benefit you. If you would prefer we use a particular method, or avoid one, tell us and we will accommodate your request — see "Request confidential communications" below.

A note about text and email. Ordinary text messages and email are convenient but are not fully secure, and messages can be seen by anyone with access to your device or account. If you communicate with us this way, you accept that risk. Tell us at any time if you would rather we not use text or email, and we will use another method.

Unless you object, we may share information directly relevant to the involvement of a family member, friend, or other person you identify as being involved in your care or in paying for your care. We may also share information with someone who is helping to locate you, or to notify a person responsible for your care about your location or condition.

If you are present and able to make decisions, we will give you the opportunity to agree or object before sharing. If you are not present, or you are unable to agree or object because of an emergency or incapacity, we may share information when, using our professional judgment, we determine it is in your best interest.

We may use or share your health information without your written authorization in the following situations, subject to the conditions and limits the law places on each one.

When required by law. We will share information when federal, state, or local law requires it.

Public health activities. To public health authorities to prevent or control disease, injury, or disability; to report births and deaths; to report reactions to medications or problems with medical products; to notify people of recalls; and to notify a person who may have been exposed to a communicable disease.

Victims of abuse, neglect, or domestic violence. To an appropriate government authority if we reasonably believe someone is a victim of abuse, neglect, or domestic violence, as permitted or required by law.

Health oversight. To agencies that oversee the health care system, for audits, investigations, inspections, and licensure.

Lawsuits and legal proceedings. In response to a court or administrative order, and in response to a subpoena, discovery request, or other lawful process once we are satisfied that reasonable efforts have been made to notify you or to obtain a protective order.

Law enforcement. For limited law-enforcement purposes, such as responding to a court order, warrant, or similar process; identifying or locating a suspect, fugitive, material witness, or missing person; providing information about a victim of a crime under certain conditions; reporting a death we believe may have resulted from criminal conduct; and reporting a crime in an emergency.

Decedents. To a coroner or medical examiner to identify a deceased person or determine cause of death, and to funeral directors as necessary for their duties.

Organ and tissue donation. To organizations that handle organ, eye, or tissue procurement or transplantation, if you are an organ donor.

Research. In limited circumstances, for research that has been approved by an institutional review board or privacy board with procedures to protect your information. We will otherwise ask for your written authorization.

To prevent a serious threat. To prevent or lessen a serious and imminent threat to the health or safety of you or the public, to someone able to help prevent the threat.

Specialized government functions. For military and veterans activities, national security and intelligence activities, protective services for the President and others, and the health and safety of inmates and correctional institutions.

Workers' compensation. As authorized by and to the extent necessary to comply with workers' compensation laws.

Business associates. To outside companies that perform services for us — for example our electronic medical record and membership platform, billing support, or professional advisors. We require each of them by written contract to safeguard your information and use it only for the services they provide to us.

Other than the situations described above, we will not use or share your health information without your written authorization. In particular, your written authorization is required before we may:

Use or share your information for marketing purposes, where we would receive payment from a third party for making the communication; sell your health information; or, to the extent we maintain them, use or share psychotherapy notes.

Most uses and disclosures of information about mental health, substance use treatment, HIV or AIDS testing, sexually transmitted infections, and genetic information also require your written permission or are subject to additional protections under Florida and federal law.

You may revoke an authorization at any time by telling us in writing. A revocation stops any future use or sharing under that authorization, but it does not undo anything we already did while the authorization was in effect.

You have the following rights regarding the health information we keep about you. To exercise any of them, contact our Privacy Officer using the information at the end of this notice. We will respond in writing if we deny a request, and we will explain why and how you may have the decision reviewed where that applies.

Inspect and get a copy of your information. You may inspect and obtain a copy of your medical and billing records, with limited exceptions. If you ask for an electronic copy of information we keep electronically, we will provide it in the electronic form and format you request if we can readily produce it. We may charge a reasonable, cost-based fee. We will act on your request within 30 days, and will tell you if we need one 30-day extension.

Direct a copy to someone else. You may direct us in writing to send a copy of your information to a person or organization you choose.

Request a correction. If you believe information in your record is incorrect or incomplete, you may ask us in writing to amend it, and you must tell us the reason. We may deny the request in certain circumstances — for example, if we did not create the information or if we determine the record is accurate and complete. If we deny it, you may submit a written statement of disagreement that we will include with your record.

Request restrictions. You may ask us to limit how we use or share your information for treatment, payment, or health care operations, or to limit what we share with someone involved in your care. We are not required to agree to most such requests, but if we do agree we will honor it except in an emergency.

Restrict disclosure to a health plan when you pay out of pocket. We must agree to your request not to share information with your health plan for payment or health care operations purposes if the information relates solely to an item or service that you — or someone other than the plan on your behalf — have paid for in full. This right may matter to you as a member of a practice where care is paid for directly.

Request confidential communications. You may ask us to contact you in a specific way or at a specific place — for example, only by cell phone, or at a work address rather than home. We will accommodate reasonable requests and will not ask you why.

Get a list of disclosures. You may request an accounting of certain disclosures we made of your health information. The accounting does not include disclosures for treatment, payment, or health care operations, disclosures you authorized, or certain others the law excludes. You may request a period of up to six years. The first accounting in any 12-month period is free; we may charge a reasonable fee for additional requests, and we will tell you the cost before we proceed.

Get a paper copy of this notice. You may ask for a paper copy at any time, even if you agreed to receive it electronically. Ask us and we will give you one.

Be notified of a breach. We will notify you if a breach occurs that may have compromised the privacy or security of your health information.

Choose someone to act for you. If you have given someone a medical power of attorney, or if someone is your legal guardian, that person can exercise these rights and make choices about your information. We will verify that the person has this authority before we act.

File a complaint. You may complain if you believe your privacy rights have been violated. See "Complaints" below.

We are required by law to maintain the privacy and security of your health information, to give you this notice of our legal duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you promptly if a breach occurs that may have compromised the privacy or security of your information.

We will not use or share your information other than as described in this notice unless you tell us in writing that we may. If you give us written permission and later change your mind, you may revoke it in writing at any time.

We may change the terms of this notice at any time, and we may make the new notice effective for all health information we already hold as well as information we receive in the future. If we make a material change, we will post the revised notice in our office and on this website, and we will make copies available on request. The effective date of the current notice appears at the top of this page.

If you believe your privacy rights have been violated, you may file a complaint with us by contacting our Privacy Officer at (786) 481-3211 or info@primeconciergemed.com, or by writing to us at 8200 SW 117 Ave, Suite 300, Miami, FL 33183. We ask that complaints be submitted in writing so that we can investigate them properly.

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at 200 Independence Avenue SW, Washington, D.C. 20201; by calling 1-877-696-6775; or at www.hhs.gov/ocr/privacy/hipaa/complaints/.

We will not retaliate against you, and will not take away any of your care or rights, because you filed a complaint.

Some information is protected by laws that are stricter than HIPAA — including Florida law and certain federal rules covering mental health records, substance use disorder treatment records, HIV and AIDS test results, sexually transmitted infections, genetic information, and the records of minors. Where a stricter law applies, we follow that stricter law.

If you have any question about this notice, want to exercise one of your rights, or want a paper copy, contact our Privacy Officer:

Privacy Officer · Prime Concierge Physicians · 8200 SW 117 Ave, Suite 300, Miami, FL 33183 · Phone: (786) 481-3211 · Fax: (786) 921-0465 · info@primeconciergemed.com