Our responsibilities
Covered healthcare providers and other regulated entities must protect the privacy and security of protected health information, provide notice of their privacy practices, and follow the notice currently in effect. LocumTele providers and Rush Pharmacy may provide their own legally controlling notices.
Uses and disclosures
Health information may be used or disclosed for treatment, payment, and healthcare operations. Examples include coordinating care, sending a valid prescription to a pharmacy, processing payment, assessing quality, preventing fraud, and operating secure systems.
Information may also be disclosed when law permits or requires it, including for public-health activities, health oversight, judicial or administrative proceedings, law enforcement, workers’ compensation, avoiding a serious threat, or other government functions.
Uses requiring authorization
Uses or disclosures not otherwise permitted generally require written authorization. You may revoke an authorization in writing, except to the extent action has already been taken. Marketing, sale of protected health information, and most disclosures of psychotherapy notes require authorization where HIPAA applies.
Your rights
- Request access to or a copy of designated health records.
- Request correction of information you believe is incorrect or incomplete.
- Request confidential communications or reasonable restrictions.
- Request an accounting of certain disclosures.
- Receive a paper or electronic copy of this notice.
- Be notified following a breach as required by law.
Some requests may be denied or limited as permitted by law. You may be asked to submit a written request and verify your identity.
Complaints
You may submit a privacy complaint without retaliation to the responsible privacy contact at [Support email pending] or [Business mailing address pending]. You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.
Responsible entities
This notice must be finalized to identify each covered entity, its privacy officer, contact details, and whether any organized healthcare arrangement applies. Until reviewed and adopted by those entities, it is an informational template and not a substitute for their official notices.