HIPAA: Ensuring patient confidentiality
Johns Hopkins is committed to protecting your health information. Our Notice of Privacy Practices explains how all members of the Johns Hopkins organizations will safeguard your privacy.
HIPAA and What it Means to You
HIPAA stands for the Health Insurance Portability and Accountability Act, which became a law in 1996. All Johns Hopkins health care providers and health insurance plans must comply with HIPAA.
HIPAA is complex and has many components. Two major areas addressed include:
Your Rights Under HIPAA
Some of the rights you have under HIPAA include the right to:
Exercising your privacy rights
If you would like to obtain information on how to request to inspect and/or receive a copy of your health information; request a restriction on the use or disclosure of your health information; request confidential communications; request a disclosure of your health information; or for other questions, please contact the medical records department (sometimes referred to as health information services or something similar) at your Johns Hopkins health care provider or the plan administrator at your Johns Hopkins health plan.
Some of those key numbers include:
For Health Plans
If you would like to request an amendment to your health information; request an accounting of disclosures of your health information; or raise a privacy complaint, please contact the Johns Hopkins Privacy Officer as specified below.
What do you do if you have any questions or would like further information?
Below is the Notice of Privacy Practices for Johns Hopkins Health Care Providers and for various Johns Hopkins Health Plans: (Note: You will need Acrobat Reader to view some of these files.)
Our Notice of Privacy Practices identifies that some of our Johns Hopkins health care provider organizations participate in the Chesapeake Regional Information System for our Patients, Inc. (CRISP), an internet-based, state-wide, state-approved health information exchange. We may share information that we obtain or create about you with other health care providers or other health care entities for treatment, payment and health care operations purposes, as permitted by law, through CRISP. For example, information about your past medical care and current medical conditions and medications can be available to us or to your non-Johns Hopkins primary care physician or hospital, if they participate in CRISP as well. Exchange of health information can provide faster access, better coordination of care and assist providers and public health officials in making more informed treatment decisions. You may opt-out of CRISP and prevent providers from being able to search for your information through the exchange. Even if you opt-out, a certain amount of your information may be retained by the exchange, and your ordering or referring physicians, if participating in CRISP, may access diagnostic information about you, such as reports of imaging and lab results. Also, your physicians, if participating in CRISP, still may use CRISP's secure messaging services to discuss your care.
Information from your medical records that we obtain or create about you, as permitted by law, also may be shared through CRISP with your health plan or health insurance company for the sole purposes of enhancing or coordinating your care.
You may "opt-out" and prevent searching for your medical information through CRISP, or prevent the sharing of your information with your health plan or health insurance company, by contacting CRISP at 1-877-952-7477 or completing and submitting an Opt-Out form to CRISP by mail or through their website at www.crisphealth.org/. Not all of the Johns Hopkins organizations participate in CRISP; your Johns Hopkins health care provider can provide information as to whether or not it participates in CRISP.