Who we are
Our website address is: http://cihsmd.org.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Cookies
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
Who we share your data with
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service.
Your contact information
Additional information
How we protect your data
What data breach procedures we have in place
What third parties we receive data from
What automated decision making and/or profiling we do with user data
Industry regulatory disclosure requirements
Who We Are
This Notice describe how protected health information (PHI) about you (or your child) may be used and disclosed at CIHS. This includes all our staff and contractors at all out sites. This Notice describes how you can access information and other privacy rights.
We are required by law to 1) make sure your medical information is kept private, 2) give you this Notice about our legal duties and privacy practice about your health information and 3) do what we say in the Notice.
If you have questions or concerns about privacy of information, you may contact.
Privacy Department
CIHS
302 Reisterstown Road,
Pikesville, Md, 21208
Telephone Number: 410-505-0550
Use & Disclosure of Protected Health Information (PHI)
Written Authorization. We have a form you can complete that allows us to share PHI with someone or an organization.
Treatment. We use and disclose your PHI to you in order to provide treatment and other services. We may contact you to provide appointment reminders. We may talk to you about alternative or other benefits and services that may be of interest to you. We may share information between CIHS mental health providers in order to coordinate care. We may disclose information for supervision or case consultation within CIHS.
Payment. We may use and disclose your PHI to obtain payment for services that we provide to your insurance plan or payer.
Health Care Operations. We may use and disclose your PHI for our health care operations. This includes our internal administration and planning. This also includes various activities that improves the quality and cost effectiveness of the care that we deliver to you. For example, we may use PHI to evaluate the quality and competence of our therapist and staffs. We may also disclose information within CIHS in order to resolve complaints.
Disclosure of Relatives Close Friends and Other Caregivers. We will use or disclose your PHI to a relative, friend, or caregiver only if you are present and we reasonably infer you do not object to the disclosure. For example, if you bring a friend or relative to a session, we may decide to use or disclose information for treatment purpose.
Public Health Activities. We may disclose your PHI for the following public health activities: (1) to report health information to public health authorities for the purpose of preventing or controlling disease, injury or disability; (2) to report information about products and services under the jurisdiction of the U.S Food and Drug Administration; (3) to alert a person who may have been exposed to a communicable disease or may otherwise be at risk of contracting or spreading a disease or condition; and (4) to report information to your employer as required under laws addressing work- related illness and injuries or workplace medical surveillance.
Abuse or Neglect. If we reasonable believe you are a victim of abuse, neglect or domestic violence, we may disclose your PHI to the appropriate government authority. This includes children, persons who have a mental health diagnosis, and the elderly. We may also disclose PHI if we come in contact with someone who has abused or neglected someone as defined by state laws.
Health Oversight Activities. There are organizations who responsible for overseeing compliance with government rules for delivering healthcare. We may disclose your PHI to such organizations to ensure compliance.
Judicial and Administration Proceedings. We may disclose your PHI in response to a court or administrative order.
Law Enforcement Officials. We may disclose your PHI to the police or other law enforcement officials as required or permitted b law or in compliance with a court order or a grand jury or administrative subpoena. This includes, but not limited to, identifying or locating missing persons, fugitives, or suspects, or reporting crimes committed on our property.
Decedents. We may disclose your PHI to a coroner or medical examiner as authorized by law. We may also disclose PHI as required for any investigation related to a death as allowed by law.
Health or Safety. We may use or disclose your PHI to prevent a serious and imminent threat to someone’s health and safety.
Special Government Functions. We may use and disclose your PHI units of the government with special functions, such as the U.S military or the U.S Department of State when the law requires it.
Worker Compensation. We may disclose your PHI as authorized by and to the extent necessary to comply with state law relating to workers compensation to other similar programs.
As required by law. We may use and disclose PHI when required to do so by any other law not listed above.
Uses and Disclosures of Your Highly Confidential Information
In addition, federal and Maryland law imposes special privacy protection for “Highly Confidential Information”. This includes alcohol and drug abuse treatment program services, HIV/AIDS testing, and genetic testing. To disclose this information (unless allowed or required by law), we will obtain your authorizations.
Coordination with Primary Care
We believe in “holistic” care: the mind and body relate to one another. So, it is important for us to coordinate your care with your primary care provider (PCP). Both federal and state privacy laws encourage this coordination between health care providers. We only share basic information such as diagnostic information, plans of care, and medications (if they are prescribed). If we need to share other information, it will be only the minimum to coordinate care. You may “restrict” this disclosure if you do not want us to share information with your PCP.
Your Right Regarding Your Protected Health Information
Complaints. If you want more information about privacy or you have a concern about your privacy at CIHS, you may contact our Privacy Officer. He is listed above. You may also file written complaint with the Director, Office for Civil Rights of the U.S. Department of Health and Human Services. The Privacy Officer con provide you with the correct address for the Director. We will not retaliate against you if you file a complaint with us or the Director.
Right to Request Additional Restriction. You may request restriction on our use and disclosure of your PHI. This is for treatment, payment and health care operation. We are not required to agree to the request. To request a restriction, contact our Privacy Officer for the form. We will send you a written response to a completed form.
If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. We will say “yes” unless a law requires us to share that information.
Right to Request Confidential Communications. You may request, and we will accommodate, any reasonable written request for you to receive your PHI by alternative means of communication or at alternative location.
Right to Revoke Your Authorization. You may request to revoke an Authorization by contacting the Privacy Officer listed above or obtain the form from our website (www.cihsmd.org). If we have already used or disclosed information, we cannot take the information back.
Right to Inspect and Copy Your Health Information. You may request access to your health information with CIHS. To access your records, complete a Record Request form that is at a CIHS site, through Medical records at 302 Reisterstown Road, Pikesville, Md, 21208 or by calling 410-505-0550, by contacting the Privacy Officer listed above. There are limited circumstances where we may deny you access to portions of your record.
If you request copies, we will charge you $10.00. We will also charge you for our postage cost, if you request that we mail the copies to you.
Right to Amend Your Records. You may request that we amend PHI at CIHS. To amend your record, obtain and complete an Amendment Request Form from Medical Records or Privacy Officer listed above. We will comply with your request unless we believe that the information that would be amended is accurate and completed or other special circumstances apply.
Right to Receive an Accounting of Disclosures. You may request a listing of some types of discourse of your PHI. This applies to disclosure within the last six years and after Dec 31st, 2017. If your request an accounting more than once during a twelve (12) month period, we will charge you $10.00 for each page of the account statement.
Right to Receive Paper Copy of this Notice. This is a paper copy of our Notice. You may receive paper copies by contacting the Privacy Officer or Medical Records described above.
Right to Be Notified of a Breach. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.