PDX Recovery is required by law to keep all protected healthcare information private.(Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), 42U.S.C. & 1320d et seq., 45 C.F.R. Parts 160 & 164, and the Confidentiality Law, 42U.S.C & 290dd-2, 42 C.F.R. Part 2.)

PDX Recovery will not disclose your private healthcare information to anyone outside of the organization without written permission from you. You may sign a Release of Information(ROI) if you wish for PDX Recovery to share your information with another healthcare provider or entity.

Federal Law does allow PDX Recovery to share information in some of the following instances:

• During a medical emergency.
• During an official audit or evaluation.
• If a crime has been committed on PDX Recovery property.
• To report child abuse or neglect.
• If there is a court order.
• Pursuant to an organization that has a signed BAA(Business Associate Agreement) with PDX Recovery.

What are my rights?

You have the right to access your own personal healthcare information upon request.

You have the right to restrict or deny how PDX Recovery uses your private healthcare information.

You have the right to complain to PDX Recovery or the Secretary of the United States Health and Human services without retaliation.

How do I make a complaint?

If you believe that your privacy rights have been violated under HIPAA, you may file a complaint with the Secretary of the United States Department of Health and Human Services.

If you believe that your privacy rights have been violated under the confidentiality law, you may file a complaint with the United States Attorney in the district where the violation occurred.

Who can I contact with questions or concerns about PDX Recovery’s privacy policy?

Any questions or concerns regarding PDX Recovery’s privacy policy can be directed to PDX Admin.