This notice describes how personal and health information about you may be used and disclosed, and how you can get access to
this information.
Please review it carefully.
The privacy of your personal and health information is important to us.

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires that health providers keep your medical and dental information private. The HIPAA Privacy Rule states that health providers must also post in a clear and prominent location, and provide patients with, a written Notice of Privacy Policy.

The privacy practices described are currently in effect in the office and online, via our website and via third-party data collection companies. We reserve the right to change our privacy practices, and the terms of this Notice at any time, provided such changes are permitted by applicable law. We reserve the right to make the changes in our privacy practices and the new terms of our Notice effective for all health information that we maintain, including health information we created or received before we made the changes. We ensure no discrimination or financial incentives for exercising your privacy rights. In adherence to California Online Privacy Protection Act (CalOPPA) requirements, we are committed to maintaining a visible privacy policy that is accessible and understandable to you. You may request a paper copy of our Notice at any time; however, a copy of our policy will be posted in the office at all times and also on our accessible website (downeycosmeticdentistry.com) under “Our Privacy Policy.” Additional information may be obtained from the HIPAA Coordinator listed in our written HIPAA Plan.

USES AND DISCLOSURES OF HEALTH INFORMATION

The following describes how information about you may be used in this dental office:

  • Treatment Services: We may use or disclose your health information to all of our team members, other dentists, your physicians, or other healthcare provider providing treatment to you.
  • Payment and Health Care Operations: We may use and disclose your health information to obtain payment for services we provide to you, to participate in quality assurance, disease management, training, licensing, and certification programs. Upon your request, we will not disclose to your health insurer any services paid by you out of pocket.
  • Marketing Health-Related Services/Fundraising: We will not use your health information for marketing communications without your written authorization. You can opt out of receiving information about our marketing or fundraisers. We will not sell your health information without your explicit authorization.
  • Appointment Reminders: We may use or disclose your health information to provide you with appointment reminders (such as voicemail messages, postcards, or letters).
  • Required By Law: We may disclose your health information when we are required to do so by law.
  • Abuse or Neglect: We may disclose your health information to appropriate authorities if we reasonably believe that you are a possible victim of abuse, neglect, or domestic violence or the possible victim of other crimes. We may disclose your health information to the extent necessary to avert a serious threat to your health or safety or the health or safety of others.
  • National Security: We may disclose to military authorities the health information of Armed Forces personnel under certain circumstances. We may disclose to authorized federal officials health information required for lawful intelligence, counterintelligence, and other national security activities. We may disclose to correctional institution or law enforcement official having lawful custody of protected health information of inmate or patient under certain circumstances.
  • Family Members, Friends, and Others Involved in Care: At your request, we may disclose your health information to a family member or other person if necessary to assist with your treatment and/or payment for services. Based on our judgment and as per 164.522(a) of HIPAA, we may disclose your information to these persons in the event of your incapacity or emergency circumstances. We will also use our professional judgment and our experience with common practice to make reasonable inferences of your best interest in allowing a person to pick up filled prescriptions, medical supplies, x-rays, or other similar forms of health information.
  • Business Associates: Some services in our organization are provided through contacts with business associates. Examples include practice management software representatives i.e. Softdent, SolutionReach, accountants, answering service personnel, VOIP phone services i.e. Vonage, etc. When these services are contracted, we may disclose your health information to our business associates so that they can perform the job we have asked them to do and bill you or your third-party payer for services rendered. All of our business associates are required to safeguard your information and to follow HIPAA Privacy Rules and have signed business associate agreements that reflect compliance with HIPAA and California requirements.
  • Worker’s Compensation: We may release medical information about you for workers’ compensation or similar programs. These programs provide benefits for work-related injuries or illnesses.
  • Research: We may disclose medical information to researchers when an institution’s review board or special privacy board has reviewed the proposed study and established protocols to ensure the privacy of the health information in their research and determined that the researcher does not need to obtain your authorization prior to using your medical information for research purposes.
  • Public Health Activities: We may disclose medical information for public health activities, to include the following:to prevent or control disease, injury, or disability; to report reactions with medications or problems with products, to notify people of recalls of products they may be using; to notify a person who may have been exposed to a disease or who may be at risk for contracting or spreading a disease of condition; to notify the proper government authority if we believe a patient has been the victim of abuse, neglect, or domestic violence (when required by law).
  • Other Authorizations: In addition to our use of your health information for treatment, payment, or healthcare operations, you may give us written authorization to use your health information or to disclose it to anyone for any purpose. If you give us an authorization, you may revoke it in writing at any time. Your revocation will not affect any use or disclosures permitted by your authorization while it was in effect. Unless you give us a written authorization, we cannot use or disclose your health information for any reason except those described in this Notice.
  • Breach Notification: We will notify you any time your PHI or PII may have been compromised through unauthorized acquisition, access, use or disclosure. We have enhanced security measures and breach notification processes that comply with both federal and California laws and are administered by the procedures of TDIC.

PATIENT RIGHTS

California Consumer Privacy Rights: You have the right to know, request access to, and delete personal information under the California Online Privacy Protection Act of 2003. Your personally identifiable information (PII), which includes but is not limited to your name, address, telephone numbers, birthdate, social security number, is secured and protected by processes that
comply with both federal and California laws.

How to request access to or change personal information:
-Email or Phone Request: You may contact us via email at drgarcia@sprynet.com or call us at 562-923-6226 to submit your access or change request. Please provide your full name, contact information, and details of your request.
-Verification Process: To protect your privacy and ensure that your request is legitimate, we may need to verify your identity before processing your opt-out request.

We will process your opt-out request as soon as possible, typically within 45 days of receiving your request. If additional time is needed, we will inform you of the reason and the extension period.

Access: You have the right to look at or get copies of your health information, with limited exceptions. You may request that we provide copies in a format other than photocopies. We will use the format you request unless we cannot practicably do so. You must make a request in writing to obtain access to your health information. You may obtain a form to request access by using the contact information listed at the end of this Notice. If you request a copy (paper or electronic), we will charge you a reasonable, cost-based fee.

Disclosure Accounting: You have the right to receive a list of instances in which we or our business associates disclosed your health information for purposes, other than treatment, payment, healthcare operations, and certain other activities, for the last 6 years. If you request this accounting more than once in a 12-month period, we may charge you a reasonable cost-based fee for responding to these additional requests.

Restriction: You have the right to request that we place additional restrictions on our use or disclosure of your health information. We are not required to agree to these additional restrictions, but if we do, we will abide by our agreement (except in an emergency).

Alternative Communication: You have the right to request that we communicate with you about your health information by alternative means or to alternative locations. You must make your request in writing. Your request must specify the alternative means or location, and provide satisfactory explanation how payments will be handled under the alternative means or location you request.

Amendment: You have the right to request that we amend your health information. Your request must be in writing, and it must explain why the information should be amended. We may deny your request under certain circumstances.

Electronic Notice: If you receive this Notice on a website or by electronic mail (e-mail), you are entitled to receive this Notice in written form.

Opt-out Rights: We are committed to respecting your privacy preferences and providing you with control over your personal information. In accordance with applicable federal and California laws, including the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act (CalOPPA), you have the right to opt out of certain data sharing practices.Please note that opting out of certain data sharing practices may affect the services we can provide to you. We will inform you of any such impacts at the time of your request.

Right to Opt-out of Sale of Personal Information: You have the right to direct us not to sell your personal information to third parties. To exercise this right, please contact us using the methods outlined below.
Right to Limit Use of Sensitive Personal Information: You can request limitations on how we use and disclose your sensitive personal information for specific purposes.

How to Opt-out:
-Email or Phone Request: You may contact us via email at drgarcia@sprynet.com or call us at 562-923-6226 to submit your opt-out request. Please provide your full name, contact information, and details of your request.
-Verification Process: To protect your privacy and ensure that your request is legitimate, we may need to verify your identity before processing your opt-out request.

We will process your opt-out request as soon as possible, typically within 45 days of receiving your request. If additional time is
needed, we will inform you of the reason and the extension period.