HIPAA Compliance Notice for Winora

Effective Date: July 1, 2024

Introduction

This Notice of Privacy Practices (“Notice”) describes how Winora (“we,” “us,” “our”) may use and disclose your Protected Health Information (“PHI”) in compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). It also describes your rights and our obligations regarding the use and disclosure of your PHI.

Our Commitment to Your Privacy

We are committed to protecting the privacy of your health information. We understand that your health information is personal and we are dedicated to maintaining its confidentiality.
  • Uses and Disclosures of Protected Health Information
  • Treatment, Payment, and Healthcare Operations
We may use and disclose your PHI for the following purposes:
  • Treatment: We may use and share your PHI with doctors, nurses, technicians, or other healthcare personnel involved in your care.
  • Payment: We may use and disclose your PHI to bill and receive payment for the services we provide to you.
  • Healthcare Operations: We may use and disclose your PHI for our healthcare operations, such as quality assessment and improvement, employee training, and compliance activities.
  • Other Permitted Uses and Disclosures

We may also use and disclose your PHI without your authorization in the following circumstances:

  • As Required by Law: We will disclose your PHI when required to do so by federal, state, or local law.
  • Public Health Activities: We may disclose your PHI for public health activities, such as reporting diseases, injuries, or vital events.
  • Health Oversight Activities: We may disclose your PHI to health oversight agencies for activities authorized by law, such as audits, investigations, and inspections.
  • Judicial and Administrative Proceedings:** We may disclose your PHI in response to a court or administrative order, subpoena, or discovery request.
  • Law Enforcement:  We may disclose your PHI to law enforcement officials as required by law or in response to a valid request.
  • Coroners, Medical Examiners, and Funeral Directors:** We may disclose your PHI to these professionals to carry out their duties.
  • Organ and Tissue Donation: We may disclose your PHI to organ procurement organizations or other entities involved in organ, eye, or tissue transplantation.
  • Research:** We may use or disclose your PHI for research purposes under certain conditions.
  • To Avert a Serious Threat to Health or Safety:** We may disclose your PHI to prevent a serious threat to your health and safety or the health and safety of the public or another person.
  • Specialized Government Functions: We may disclose your PHI for specialized government functions, such as military and veterans’ activities, national security, and intelligence activities.
  • Workers’ Compensation: We may disclose your PHI to comply with workers’ compensation laws and other similar programs.

Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization for uses and disclosures not described in this Notice, including:
  • Marketing Purposes: We will not use or disclose your PHI for marketing purposes without your authorization.
  • Sale of PHI: We will not sell your PHI without your authorization.
You may revoke your authorization at any time in writing, except to the extent that we have already taken action based on your authorization.
  • Your Rights Regarding Your Protected Health Information

You have the following rights regarding your PHI:

  • Right to Inspect and Copy:** You have the right to inspect and obtain a copy of your PHI, with certain exceptions.
  • Right to Amend: You have the right to request an amendment of your PHI if you believe it is incorrect or incomplete.
  • Right to an Accounting of Disclosures:** You have the right to request an accounting of certain disclosures of your PHI made by us.
  • Right to Request Restrictions:** You have the right to request restrictions on the use or disclosure of your PHI. We are not required to agree to your request, but we will consider it.
  • Right to Request Confidential Communications:** You have the right to request that we communicate with you about medical matters in a certain way or at a certain location.
  • Right to a Paper Copy of This Notice:** You have the right to obtain a paper copy of this Notice upon request.

Changes to This Notice

We reserve the right to change this Notice at any time. The revised Notice will be effective for all PHI that we maintain. We will post a copy of the current Notice in our office and on our website. The effective date of the Notice will be indicated at the top of the page.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. To file a complaint with us, contact: We will not retaliate against you for filing a complaint. If you have any questions about this Notice or our privacy practices, please contact: Winora This HIPAA Compliance Notice is designed to inform you of our privacy practices and your rights regarding your protected health information. Please review it carefully and feel free to contact us with any questions or concerns.