Privacy Policy

Your privacy is a primary concern to us at Louisiana Occupational Health Services.Our goal in expanding and clarifying our procedures forÊthe collection and use of data is to ensure the highest level of confidentiality and security.

When you provide your personal information to LOHS (name, address, phone number, or donation information) we will not give or sell your individual information to any outside company for its use in marketing or solicitation. We will maintain the confidentiality of your personal information and it will be used only to support your relationship with LOHS. Additionally, internal practices help protect your privacy by limiting employee access to and use of visitor data.

At LOHS we are helping you maintain control over your personal data while fostering the growth of a more interactive on-line environment. Our intention is to only send e-mail to customers or to friends of LOHS whom we believe have chosen to receive such transmissions. At any time you have the right to 'opt out' of receiving future communications.

LOHS also cares about consumer privacy. Information that we collect about our consumers is private. Only people who have both the need and the legal right may see consumer information. Unless a consumer gives us permission in writing, we will only disclose information for the purposes of treatment, payment, business operations or when we are required by law to do so. This website is public domain and, therefore, does not contain any private consumer information.

Thank you for choosing to visit LOHS's on-line location, and thank you for your support as we continue to help brighten the lives of the people we serve.

1. Protected Health Information (PHI)
   "Individually identifiable health information" that is transmitted or maintained by electronic media or is transmitted or maintained in any other form or medium. PHI is health information (including demographic information collected from an individual) that:
   • Relates to the past, present or future physical or mental health or condition of an individual, the provision of health care to an individual; or the past, present or future payment for the provision of health care to an individual.
   • Identifies the individual, or provides a reasonable basis to believe that the information could be used to identify the individual.
2. Disclose/Disclosure
   Release, transfer or provision of access to, or divulging in any other manner of information outside the entity holding the information.
3. Use/Usage
   The sharing, application, utilization, examination, or analysis of such information within an entity or individual that maintains such information.
4. Privacy Officer
   An individual responsible for the development and implementation of LOHS's policies and procedures for handling PHI and otherwise complying with the HIPAA privacy regulations.
5. Contact Person
   An individual responsible for acting as the contact for employees and third parties with regard to any information, policies or training pertaining to PHI or the related policies and procedures.

HIPAA Privacy Procedures

Uses and Disclosures of Protected Health Information (PHI)
 
LOHS may only use or disclose PHI when at least one of the following conditions is true:

1. The individual who is the subject of the information has authorized the use or disclosure.?
2. The individual who is the subject of the information agrees or does not object to the disclosure and the disclosure is to persons involved in the health care of the individual.?
3. The disclosure is to the individual who is the subject of the information.
4. The use or disclosure is for one of the HIPAA "public purposes" (i.e., required by law, etc.).?
5. The disclosure is in furtherance of LOHS's health care operations as set forth in HIPAA.
6. To the extent possible, LOHS will attempt to mitigate the effects of any unauthorized use or disclosure of PHI.
1. Access to Protected Health Information by the Individual
   Access to PHI will be granted to the individual who is the subject of such information within the timeframes set forth below.The individual requesting access will be informed of the location of PHI if it is not physically located on the premises.
    
   

   Location of PHI	Time Limit
   PHI that is maintained in the LOHS Benefits office	Provide approval and access or notice of denial within 30 days of the request
   PHI that is maintained outside the LOHS Benefits office	Provide approval and access or notice of denial within 60 days

   
   
2. Verification of Identity
   The identity of any individual who requests access to PHI will be verified before such access is granted.
3. Right to Request Restrictions
   An individual may request restrictions on certain uses and disclosures of his/her PHI. The individual has the right to request a limit on LOHS's disclosure of his/her PHI to someone involved in the payment of his/her care.However, LOHS is not required to agree to such a request.
4. Right to receive Confidential Communications Channels
   Upon specific request made by an individual, LOHS will use confidential communications channels, to the extent possible, with that individual.
5. Amendment of Incomplete or Incorrect Protected Health Information
   All requests for amendment of incorrect PHI maintained by LOHS will be considered in a timely fashion. If such requests demonstrate that the information is actually incorrect, LOHS will allow amending language to be added to the appropriate document.LOHS may deny a request to amend if the health information records are not created or maintained by LOHS, if the request does not include a supporting reason, if there is an exception, or if LOHS determines that the existing information is accurate and complete.If there is an amendment or correction, LOHS will notify any organization with whom the incorrect information was shared.
6. Disclosure Accounting
   An individual may make a written request for an accounting of all disclosures of PHI made by LOHS to others. The request must set forth a specific time period for the disclosures not starting earlier than April 14, 2003 or going back for more than 6 (six) years.
7. Access by Personal Representatives
   Access to PHI must be granted to personal representatives of individuals, including deceased individuals, as though they were the individuals themselves, except in cases of abuse, where granting said access might endanger the individual or someone else. HIPAA privacy protections extend to information concerning deceased individuals. LOHS will conform to the relevant custody status and the federal, state, and local applicable law when disclosing information about minors to their parents.
8. LOHS Employee Access to Protected Health Information and Prohibited Conduct
   Only certain employees within LOHS, primarily within LOHS's Human Resources Department, will have access to PHI, in order for LOHS to facilitate the payment of health care benefits or work with health care providers.No employee with authorized access to PHI may engage in any intimidating or retaliatory acts against persons who file complaints or otherwise exercise their rights under the HIPAA regulations. Enrollment or eligibility for benefits for any individual may not be conditioned on an individual providing an authorization to disclose PHI.Any employee authorized to handle PHI who intentionally or unintentionally violates any of the applicable policies or any procedures may be subject to disciplinary procedures up to and including termination.
9. Judicial and Administrative Proceedings
   Information will be disclosed for the purposes of a judicial or administrative proceeding only when: accompanied by a court or administrative order, including a protective order, or grand jury subpoena; when accompanied by a subpoena or discovery request that includes either the authorization of the individual to whom the information applies, or documented assurances that good faith effort has been made to adequately notify the individual of the request for their information and there are no outstanding objections by the individual. If a subpoena or discovery request is submitted to LOHS without one of these assurances, LOHS will seek to notify the individual or obtain his or her authorization.In no case will LOHS disclose information other than that required by the court order, subpoena, or discovery request.
10. De-Identified Data and Limited Data Sets
    LOHS will disclose de-identified data only if it has been properly de-identified by removing all the relevant identifying data.LOHS will make use of limited data sets, but only after the relevant identifying data have been removed and then only to organizations with whom LOHS has data use agreements and only for public health or health plan administration purposes.
11. Authorizations
    A valid authorization will be obtained for all disclosures that are not: to the individual or his/her personal representative, to persons involved with the individual's care, to business associates in their legitimate duties, or for public purposes.Any authorizations generated from outside LOHS will be reviewed to determine validity.
12. Complaints
    All complaints relating to the use and/or disclosure of PHI by LOHS must be in writing and addressed to LOHS's Privacy Officer or Contact Person.Within 30 days of receipt of a complaint, it will be investigated. A written response to the complainant will occur within 10 days after the investigation is complete. If the complaint stems from a valid area of non-compliance with the HIPAA Privacy Regulations, LOHS will implement a resolution within a timely fashion.
13. Physical Safeguards
    Appropriate physical safeguards are in place to reasonably safeguard PHI from any intentional or unintentional use or disclosure that is in violation of the HIPAA Privacy Regulations. These safeguards will include physical protection of premises and PHI, technical protection of PHI maintained electronically and administrative protection.These safeguards will extend to the oral communication of PHI. These safeguards will extend to PHI that is removed from LOHS.
14. Retention of Records
    LOHS will retain all records subject to the HIPAA Privacy Rule for six years. All records designated by HIPAA in this retention requirement will be maintained in a manner that allows for access within a reasonable period of time by an individual making a request. The six year records retention period may be extended at LOHS's discretion to meet with other governmental regulations or those requirements imposed by LOHS's professional liability carrier.
15. Cooperation with Privacy Oversight Authorities
    Oversight agencies such as the Office for Civil Rights of the Department of Health and Human Services will be given full support and cooperation in their efforts to ensure the protection of PHI within LOHS.