Privacy Policy

Notice of Privacy Practices

Spanish Privacy Policy | Russian Privacy Policy | Korean Privacy Policy

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN OBTAIN ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Mercy Health Services (MHS) is required by law to maintain the privacy of identifiable information that relates to your physical or mental health, health care you have received, or payment for your care. As required by law, this Notice provides you with information about your rights and our legal duties and privacy practices with respect to your health information. This Notice also describes how MHS may use or disclose your health information.

The privacy practices described in this Notice will be followed by all MHS affiliated sites, health care professionals, employees, medical staff, trainees, students, and volunteers of the organizations specified at the end of this Notice. In addition, these organizations, sites, or individuals may share health information with each other and other health organizations affiliated with MHS as part of an organized health care arrangement for treatment, payment, and health care operations purposes as described in this Notice or otherwise permitted by law.

How We May Use and Disclose Health Information About You

MHS may use or disclose health information about you, without your written consent (known as an authorization), for purposes related to:

Treatment: Treatment means the coordination of your care between various health care providers and specialists for consultations. For example, a specialist treating you for a broken leg may need to know if you have diabetes because diabetes may slow the healing process. Therefore, the specialist may review medical records from your primary care doctor to assess whether you have potentially complicating conditions such as diabetes.

Payment: Payment refers to activities related to verifying your level of insurance benefits, requesting authorizations for treatment and referrals for special tests, and billing/administrative purposes. For example, MHS may need to provide information to your insurance plan about your medical condition in order to determine whether the proposed course of treatment will be covered.

Health Care Operations: Health care operations refers to the administrative and operational activities MHS must engage in, including quality assurance, case management, audits, and physician reviews. For example, MHS may use your health information to evaluate the performance of our staff in caring for you.

Health Information Exchanges: MHS may share information that we obtain or create about you with other health care providers or health care entities, as permitted by law, through Health Information Exchanges (HIEs) in which we participate. An HIE is a technology framework that allows for secure electronic exchange of health information among participating organizations, such as hospitals, physician offices, labs, radiology centers, and other medical providers. By exchanging information through HIEs, it provides MHS and other participating health care providers faster access to health information about you, which allows them to make more informed treatment decisions and coordinate your care.

MHS participates in the Chesapeake Regional Information System for our Patients, Inc. (CRISP), a statewide HIE. As permitted by law, your health information will be shared with this HIE in order to provide faster access, better care coordination, and assist providers and public health officials in making more informed decisions. You may “opt-out” and prevent searching of your health information through CRISP by calling 1-877-952-7477 or completing and submitting an Opt-Out form to CRISP by mail, fax or through their website at www.crisphealth.org. If you opt-out of CRISP, certain health information about you may still be available through the HIE as permitted or required by law. For example, medical providers who are treating you will no longer be able to search for your health information through CRISP, but will still be able to receive lab results, radiology reports, and other data sent directly from CRISP that they may have previously received by fax or mail. In addition, public health reporting and controlled dangerous substance information, as part of the Maryland Prescription Drug Monitoring Program, will still be available to providers through CRISP.

MHS also participates in other HIEs, including through its electronic medical records (EMR) system. This allows MHS to share or obtain health information about you for treatment, payment, or health operations purposes directly through its EMR system with your other health care providers if they participate in the same HIE. You may request to opt out of these other HIEs by contacting the MHS Privacy Officer, whose contact information is below.

Facility Directory: If you are admitted to Mercy Medical Center or Stella Maris, MHS may include certain limited information about you in its facility directory, including your name, location, general condition, and religious affiliation. MHS may disclose directory information to members of the clergy or, except for religious affiliation, to persons who ask for you by name. If you object to your information being included in the facility directory, you should tell the registration staff during registration or contact the MHS Privacy Officer. If you are unavailable, MHS will use professional judgment to determine whether it is in your best interest to include your information in the directory.

Family Members and Other Individuals Involved in Your Care: Unless you object, MHS may disclose your health information to family members or other persons who are involved in your medical care or help you pay for your care, provided the information is relevant to that person’s involvement in your care. MHS may also allow them to pick up medical supplies, x-rays, or filled prescriptions on your behalf. If you are unavailable, MHS will use professional judgment to determine what is in your best interest. Appointment Reminders and Treatment Alternatives: MHS may contact you to remind you about your appointments and bring to your attention alternative treatment options and other health related benefits and services. Fundraising: MHS may disclose to the Mercy Health Foundation your demographic information, dates on which you received services from MHS, the MHS department or provider from which you received care, the name of your treating provider, your treatment outcome, and your insurance status. You may be contacted as part of our fundraising efforts to support our health care mission. You have a right to opt out of receiving such communications by notifying the Mercy Health Foundation at 410-332-9874 or at updatemyrecord@mdmercy.com. Organ and Tissue Donation: MHS may disclose your health information to organizations that handle organ and tissue procurement and donations. Military Authorities: If you are a member of the U.S. Armed Forces or foreign military, MHS may release health information about you to appropriate military command authorities. Workers' Compensation: MHS may disclose health information to comply with workers' compensation laws. Public Health Activities: MHS may disclose your health information to public health officials for public health purposes, including: preventing or controlling disease, injury, or disability; reporting child abuse or neglect; reporting adverse events or product defects to the U.S. Food and Drug Administration; and to notify persons that may have been exposed to a disease or may be at risk of contracting or spreading a disease.

Health Oversight: MHS may disclose your health information to federal or state agencies that oversee the health care system, government programs, and enforcement of civil rights laws for audits, investigations, or inspections.

Legal Proceedings: MHS may disclose your health information to courts and attorneys in response to a court order, subpoena, or other lawful process, or to defend ourselves against a lawsuit.

Law Enforcement: MHS may disclose your health information to law enforcement officials as permitted or required by law to aid in the search for a criminal or fugitive or a criminal investigation.

Coroners, Medical Examiners, and Funeral Directors: MHS may disclose your health information to identify a deceased person, determine cause of death, and to help funeral directors carry out their duties.

National Security: MHS may disclose your health information to authorized federal authorities for intelligence or other national security activities as permitted by law.

Inmates and Persons in Custody: If you are an inmate of a correctional facility or under the custody of law enforcement, MHS may release your health information to the correctional facility or law enforcement officer as permitted or required by law.

Research: MHS may use or disclose your health information for research purposes under specific rules determined by the confidentiality provisions of applicable law. MHS may use or disclose your health information to researchers if they have been approved through a special review process designed to protect patient safety, welfare, and confidentiality.

Threats to Health or Safety: As permitted by applicable law and ethical conduct, MHS may use and disclose health information if it believes, in good faith, that such use or disclosure is necessary to prevent serious harm to you or others. We may also share your information for disaster relief efforts or in emergency situations.

Business Associates: MHS may disclose your health information to outside businesses known as “business associates” that provide services on its behalf, such as billing or consulting services.

Uses and Disclosures Requiring Your Authorization

Uses and disclosures of health information not described in this Notice will be made only with your written authorization. For example, with limited exceptions, MHS must obtain your authorization before: using and disclosing psychotherapy notes; using or disclosing your health information for marketing purposes (except for communications made face-to-face or promotional gifts of minimal value provided to you by MHS); or selling or receiving anything of value in exchange for your health information. If you authorize MHS to use or disclose your health information, you have the right to revoke the authorization at any time by providing written notice to the MHS Privacy Officer whose contact information is below. Your revocation will be effective once received, but will not impact uses or disclosures MHS made while your authorization was still in effect.

Your Rights Regarding Health Information About You

You have the following rights with respect to health information that MHS maintains about you:

Right to Inspect and Copy. You have the right to inspect and/or receive a copy of your medical and billing records used by MHS to make health care decisions about you. You also have the right to request that MHS send a copy of your medical records to a third party. If you want to review or receive a copy of your records, you must make the request in writing to your provider or the appropriate medical records department.

Right to Request an Amendment. If you believe that health information MHS maintains about you is inaccurate or incomplete, you may request that MHS amend the information. You must request the amendment in writing to your provider or with the attached form sent to the Health Information Services Department at 301 St. Paul Place, Baltimore, MD 21202. If MHS accepts your request, it will notify you of the change. MHS cannot delete what is in the record. If MHS denies your request, it will provide an explanation of the denial and your rights.

Right to an Accounting of Disclosures. You have the right to receive a list of the disclosures MHS has made of your health information in the six years prior to your request. The accounting of disclosures will not include every disclosure made, including those disclosures made for treatment, payment, health care operations, disclosures authorized by you, and disclosures made to you. To request an accounting, submit a written request to the MHS Privacy Officer.

Right to Request Restrictions. You have the right to request that MHS restrict how it uses and discloses your health information for treatment, payment, or health care operations, or with family members or others involved in your care. MHS is not required to accept your requested restriction, unless it relates to disclosures made to your health insurer related to a specific service for which you have prepaid in full; however, if the service is part of a group of services “bundled” for health plan billing purposes, it may not be possible for MHS to restrict the disclosure .If MHS agrees to a restriction, you will be notified in writing, and MHS will comply with your request unless the health information is needed to provide you emergency treatment or we are required by law to disclose it. To request a restriction, submit a written request detailing the requested restriction to the MHS Privacy Officer.

Right to Request Confidential Communications. You have the right to request that MHS communicate with you about your health information or services using a certain method (i.e., MyChart, phone, mail) or at a certain location. MHS will honor reasonable requests when feasible. To request an alternative means of communication, submit a written request to your provider or the MHS Privacy Officer.

Right to Receive a Paper Copy of this Notice. You have the right to obtain a paper copy of this Notice at any time. To obtain a copy, contact your provider or the MHS Privacy Officer.

Right to be Notified of a Breach. MHS is required to notify you of a breach of your unsecured health information.

Changes to this Notice

This Notice is effective as of September 29, 2018. MHS must abide by the terms of the Notice currently in effect. MHS reserves the right to make changes at any time to its privacy practices and this Notice, and may make the new terms effective for all health information that MHS already maintains about you as well as information it receives in the future. If changes are made to the Notice, the updated Notice will be posted on the MHS website at https://mdmercy.com/about-mercy/policies-and-corporate-documents/privacy-policy, posted in clear and prominent locations throughout MHS sites, and distributed as required.

Questions or Complaints

If you have a question about this Notice or feel that your privacy rights have been violated, please contact the MHS Privacy Officer using the contact information below. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services. You will not be penalized or retaliated against for filing a complaint.

MHS Privacy Officer
301 St. Paul Place, Baltimore, MD 21202
Phone: (410) 576-LAWS (5297)
Email: Compliance@mdmercy.com

All organizations that are part of the MHS designated affiliated covered entity follow this Notice, including, but not limited to:

Mercy Medical Center, Inc.; North Calvert Anesthesiology Services, LLC; Mercy Transitional Care Services, Inc.; Lutherville Hematology and Oncology Services, LLC; Stella Maris, Inc.; St. Paul Place Specialists, Inc.; Maryland Family Care, Inc.; Eye Services, LLC; Teresa Hoffman, M.D. and Associates, LLC; Vascular Specialty Services, Inc.; Neurosurgical Specialty Services, LLC; Integrative and Complementary Services, LLC; The Emergency Room Physicians SPPS, LLC; Maryland Specialty Services, LLC.

Non-Discrimination Notice

MHS complies with applicable Federal civil rights laws and does not discriminate on the basis of race, color, national origin, sex, age, or disability.

ATENCIÓN:si habla español, tiene a su disposición servicios gratuitos de asistencia lingüística.Llame al 1-410-332-9000 (TTY: 1-410-332-9000).

주의:한국어를 사용하시는 경우, 언어 지원 서비스를 무료로 이용하실 수 있습니다.1-410-332-9000 (TTY: 1-410-332-9000) 번으로 전화해 주십시오.

ВНИМАНИЕ:Если вы говорите на русском языке, то вам доступны бесплатные услуги перевода.Звоните 1-410-332-9000 (телетайп: 1-410-332-9000).