HIPAA Privacy Policy
Introduction
At Nurse Practitioner in Adult Health of Manhattan, PLLC dba vipsiv.com, we provide premium mobile IV hydration services with the utmost discretion and expertise, delivered by our board-certified nurse practitioners. We are steadfastly committed to protecting the privacy and security of your personal health information in full compliance with the Health Insurance Portability and Accountability Act (HIPAA) of 1996, as amended by the HITECH Act of 2009, all applicable U.S. federal regulations (45 CFR Parts 160 and 164), and New York State laws, including but not limited to Public Health Law §18 and Title 10 of the New York Codes, Rules, and Regulations (NYCRR). This Privacy Policy outlines how we collect, use, disclose, and safeguard your Protected Health Information (PHI), ensuring your confidence in our care.
Definitions
Protected Health Information (PHI): Any individually identifiable health information we maintain or transmit in any form (electronic, paper, or oral) related to your past, present, or future physical or mental health, healthcare services provided, or payment for those services.
Covered Entity: As a healthcare provider furnishing medical services directly to patients, Nurse Practitioner in Adult Health of Manhattan, PLLC dba vipsiv.com is a Covered Entity under HIPAA, obligated to adhere to its privacy and security mandates.
Covered Entity: As a healthcare provider furnishing medical services directly to patients, Nurse Practitioner in Adult Health of Manhattan, PLLC dba vipsiv.com is a Covered Entity under HIPAA, obligated to adhere to its privacy and security mandates.
Our Commitment to Your Privacy
Your health information is sensitive, and we uphold the strictest standards of confidentiality. This policy details your rights under federal and New York State laws, our responsibilities, and the measures we employ to protect your PHI while delivering exceptional, discreet care.
How We Collect and Use Your PHI
Collection of PHI
We collect only the PHI necessary to provide mobile IV hydration services, including:
Personal Identifiers: Name, address, phone number, email, and date of birth.
Health Information: Medical history, current symptoms, vital signs, allergies, and treatment preferences.
Payment Information: Billing details, insurance data (if applicable), and payment records.
We may obtain this information directly from you during booking, consultation, or treatment, or from third parties (e.g., referring physicians) with your consent.
Health Information: Medical history, current symptoms, vital signs, allergies, and treatment preferences.
Payment Information: Billing details, insurance data (if applicable), and payment records.
We may obtain this information directly from you during booking, consultation, or treatment, or from third parties (e.g., referring physicians) with your consent.
Permitted Uses of PHI
We use your PHI for purposes permitted by HIPAA and New York law, including:
Treatment: To evaluate your needs, administer IV hydration, and coordinate care with our nurse practitioners.
Payment: To process payments, issue invoices, and, if applicable, submit claims to your insurance provider.
Healthcare Operations: To manage our practice, including quality improvement, staff training, scheduling, and legal compliance.
We may also use PHI to contact you for appointment reminders, treatment follow-ups, or service updates, unless you opt out as permitted under New York law.
Payment: To process payments, issue invoices, and, if applicable, submit claims to your insurance provider.
Healthcare Operations: To manage our practice, including quality improvement, staff training, scheduling, and legal compliance.
We may also use PHI to contact you for appointment reminders, treatment follow-ups, or service updates, unless you opt out as permitted under New York law.
Disclosure of Your PHI
Disclosures Without Your Authorization
Under HIPAA and New York law, we may disclose your PHI without prior written authorization in these cases:
To You: Upon your request to access your PHI (see “Your Rights” below).
Treatment, Payment, and Operations: As outlined above, to facilitate your care, billing, and internal processes.
Public Health and Safety: To report communicable diseases, adverse reactions, or imminent threats to authorized agencies (e.g., FDA, CDC, NY Department of Health), per Public Health Law §18 and NYCRR Title 10.
Legal Compliance: To comply with federal and state laws, court orders, subpoenas, or audits by regulatory bodies (e.g., HHS Office for Civil Rights, NY State Department of Health).
Abuse or Neglect: To report suspected abuse, neglect, or domestic violence to appropriate authorities, as mandated by New York law.
Business Associates: To third-party vendors (e.g., billing services, IT providers) under a Business Associate Agreement (BAA) ensuring HIPAA compliance.
Deceased Clients: To coroners, medical examiners, or funeral directors, consistent with New York regulations.
To You: Upon your request to access your PHI (see “Your Rights” below).
Treatment, Payment, and Operations: As outlined above, to facilitate your care, billing, and internal processes.
Public Health and Safety: To report communicable diseases, adverse reactions, or imminent threats to authorized agencies (e.g., FDA, CDC, NY Department of Health), per Public Health Law §18 and NYCRR Title 10.
Legal Compliance: To comply with federal and state laws, court orders, subpoenas, or audits by regulatory bodies (e.g., HHS Office for Civil Rights, NY State Department of Health).
Abuse or Neglect: To report suspected abuse, neglect, or domestic violence to appropriate authorities, as mandated by New York law.
Business Associates: To third-party vendors (e.g., billing services, IT providers) under a Business Associate Agreement (BAA) ensuring HIPAA compliance.
Deceased Clients: To coroners, medical examiners, or funeral directors, consistent with New York regulations.
Disclosures Requiring Your Authorization
We will not disclose your PHI beyond the above purposes without your written authorization, including:
Sharing with family or friends (unless involved in your care and you consent).
Use for marketing or research (unless de-identified).
Sale of your PHI.
You may revoke authorization in writing at any time, though prior disclosures remain unaffected, per 45 CFR §164.508(b)(5).
We will not disclose your PHI beyond the above purposes without your written authorization, including:
Sharing with family or friends (unless involved in your care and you consent).
Use for marketing or research (unless de-identified).
Sale of your PHI.
You may revoke authorization in writing at any time, though prior disclosures remain unaffected, per 45 CFR §164.508(b)(5).
Your Rights Under HIPAA and New York Law
As our client, you have the following rights regarding your PHI, reflecting both federal and New York protections:
Right to Access:
You may request to inspect or obtain a copy of your PHI in our designated record set. Submit requests in writing to [Your Privacy Officer Contact Info].
We will respond within 30 days (extendable by 30 more with notice), per 45 CFR §164.524(b)(2). New York’s Public Health Law §18 may require faster access in some cases; we will comply with the stricter standard.
A reasonable, cost-based fee may apply for copies, not exceeding New York’s cap (e.g., $0.75 per page).
Right to Amend:
You may request corrections to inaccurate or incomplete PHI. We will respond within 60 days (extendable by 30 more), per 45 CFR §164.526(b)(2), and explain any denials in writing.
Right to an Accounting of Disclosures:
You may request a list of disclosures made in the past six years, excluding treatment, payment, or operations disclosures, per 45 CFR §164.528. One free accounting per year; additional requests may incur a fee.
Right to Request Restrictions:
You may request limits on PHI use or disclosure for treatment, payment, or operations. We may deny requests unless you pay out-of-pocket in full and restrict insurance disclosure, per 45 CFR §164.522(a).
Right to Confidential Communications:
You may request alternative communication methods (e.g., specific phone, address). We will accommodate reasonable requests, per 45 CFR §164.522(b).
Right to Notice:
You may obtain this Privacy Policy in paper form upon request, even if received electronically.
Right to File a Complaint:
If you believe your privacy rights are violated, contact our Privacy Officer at [Your Contact Info] or file with the U.S. HHS Office for Civil Rights (200 Independence Ave, SW, Washington, DC 20201; 1-877-696-6775; www.hhs.gov/ocr) or the NY State Department of Health. We will not retaliate.
Right to Access:
You may request to inspect or obtain a copy of your PHI in our designated record set. Submit requests in writing to [Your Privacy Officer Contact Info].
We will respond within 30 days (extendable by 30 more with notice), per 45 CFR §164.524(b)(2). New York’s Public Health Law §18 may require faster access in some cases; we will comply with the stricter standard.
A reasonable, cost-based fee may apply for copies, not exceeding New York’s cap (e.g., $0.75 per page).
Right to Amend:
You may request corrections to inaccurate or incomplete PHI. We will respond within 60 days (extendable by 30 more), per 45 CFR §164.526(b)(2), and explain any denials in writing.
Right to an Accounting of Disclosures:
You may request a list of disclosures made in the past six years, excluding treatment, payment, or operations disclosures, per 45 CFR §164.528. One free accounting per year; additional requests may incur a fee.
Right to Request Restrictions:
You may request limits on PHI use or disclosure for treatment, payment, or operations. We may deny requests unless you pay out-of-pocket in full and restrict insurance disclosure, per 45 CFR §164.522(a).
Right to Confidential Communications:
You may request alternative communication methods (e.g., specific phone, address). We will accommodate reasonable requests, per 45 CFR §164.522(b).
Right to Notice:
You may obtain this Privacy Policy in paper form upon request, even if received electronically.
Right to File a Complaint:
If you believe your privacy rights are violated, contact our Privacy Officer at [Your Contact Info] or file with the U.S. HHS Office for Civil Rights (200 Independence Ave, SW, Washington, DC 20201; 1-877-696-6775; www.hhs.gov/ocr) or the NY State Department of Health. We will not retaliate.
Safeguarding Your PHI
We employ robust safeguards to protect your PHI, meeting HIPAA’s Security Rule (45 CFR Part 164, Subpart C) and New York standards:
Encryption: Electronic PHI (ePHI) is encrypted during transmission and storage.
Access Controls: Only authorized personnel access PHI, under strict confidentiality agreements.
Training: Our staff receive ongoing HIPAA and New York privacy training.
Physical Security: Paper records are stored in locked, restricted areas.
Breach Response: We maintain protocols to detect, contain, and report breaches.
If a breach compromises your PHI, we will notify you, HHS, and, if required (e.g., 500+ affected), the media within 60 days of discovery, per 45 CFR §164.404-410 and New York law.
Encryption: Electronic PHI (ePHI) is encrypted during transmission and storage.
Access Controls: Only authorized personnel access PHI, under strict confidentiality agreements.
Training: Our staff receive ongoing HIPAA and New York privacy training.
Physical Security: Paper records are stored in locked, restricted areas.
Breach Response: We maintain protocols to detect, contain, and report breaches.
If a breach compromises your PHI, we will notify you, HHS, and, if required (e.g., 500+ affected), the media within 60 days of discovery, per 45 CFR §164.404-410 and New York law.
New York State-Specific Protections
New York imposes additional safeguards beyond HIPAA:
Stricter Access Rules: Public Health Law §18 may require faster PHI access or lower fees than federal law; we comply with the most protective standard.
Sensitive Information: Disclosures of HIV/AIDS, mental health, or substance abuse data may require specific consent under NYCRR Title 10 and Mental Hygiene Law §33.13, which we honor.
Minors: Parental access to minors’ PHI may be limited under New York law (e.g., reproductive health); we follow applicable restrictions.
Stricter Access Rules: Public Health Law §18 may require faster PHI access or lower fees than federal law; we comply with the most protective standard.
Sensitive Information: Disclosures of HIV/AIDS, mental health, or substance abuse data may require specific consent under NYCRR Title 10 and Mental Hygiene Law §33.13, which we honor.
Minors: Parental access to minors’ PHI may be limited under New York law (e.g., reproductive health); we follow applicable restrictions.
Policy Updates
We may revise this Privacy Policy to reflect legal or operational changes. The latest version will be posted at Nurse Practitioner in Adult Health of Manhattan, PLLC dba vipsiv.com with an effective date. Significant updates affecting your rights will be communicated directly.
Contact Us
For questions, requests, or concerns about your PHI or this policy, please reach out to our Privacy Officer:
Nurse Practitioner in Adult Health of Manhattan, PLLC dba vipsiv.com
Privacy Officer: Aleksey Aronov
Phone: 347-410-6698
Online: Submit inquiries via our secure form by clicking and submitting this contact form.
Effective Date: March 16, 2025
For questions, requests, or concerns about your PHI or this policy, please reach out to our Privacy Officer:
Nurse Practitioner in Adult Health of Manhattan, PLLC dba vipsiv.com
Privacy Officer: Aleksey Aronov
Phone: 347-410-6698
Online: Submit inquiries via our secure form by clicking and submitting this contact form.
Effective Date: March 16, 2025