NOTICE OF PRIVACY PRACTICES

Initial Effective Date: April 14, 2003

Revised: 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1) Purpose

Kidney and Hypertension Clinic of Alaska (KHC) and its staff, employees, volunteers, and all affiliated entities, dialysis facilities, and related operations, operating as a Single Affiliated Covered Entity (collectively “KHC”), follow the privacy practices described in this Notice. KHC is required by law to maintain the privacy of your protected health information (PHI) and will maintain your medical information in a confidential manner. However, KHC must use and disclose your medical information to the extent necessary to provide you with quality health care. To do this, KHC must share your medical information as necessary for treatment, payment, and health care operations.

2) What Are Treatment, Payment, and Health Care Operations?

Treatment includes sharing information among health care providers involved in your care. For example, your physician may share information about your condition with a pharmacist to discuss appropriate medications, or with radiologists or consultants to make a diagnosis. KHC may use your medical information as required by your insurer to obtain payment for your treatment. We also may use and disclose your medical information to improve the quality of care, for example, for review and training purposes.

3) How Will KHC Use My Medical Information?

Your medical information may be used or disclosed, unless you ask for restrictions on a specific use or disclosure, for the following:

• KHC Directory (name, general condition, location)
• Religious affiliation to clergy
• Family members or close friends involved in your care or payment
• Disaster relief organizations
• Appointment reminders
• Treatment alternatives or health‑related benefits/services (with opt‑out option if KHC is paid to send the communication)
• Fundraising activities (limited to name, address, phone number, and dates of service; you may opt out at any time)
• As required by law
• Public health activities
• Health oversight activities
• Lawsuits and disputes
• Law enforcement
• Coroners and medical examiners
• Organ and tissue donation
• Approved research
• To prevent a serious threat to health or safety
• Military command authorities
• National security and intelligence activities
• Protection of the President or other authorized persons
• Inmates
• Workers’ Compensation
• Business associates
• CMS reporting
• Breach reporting
• State Health Information Exchanges (with opt‑out rights)

 

Additional Restrictions for Certain Types of Information

Certain types of information may be subject to additional restrictions on disclosure, such as AIDS test results and psychotherapy notes.

Substance Use Disorder (SUD) Records

Medical information related to diagnosis, treatment, or referral for treatment of a Substance Use Disorder (SUD) is protected by federal law (42 CFR Part 2). These records have stricter confidentiality protections than other health information. KHC may not use or disclose SUD treatment records without your written authorization unless federal law specifically permits the disclosure. SUD records generally may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without your written authorization or a court order that meets the requirements of 42 CFR Part 2.

Reproductive Health Privacy

KHC will not use or disclose PHI for the purpose of investigating or imposing liability on any person for seeking, obtaining, providing, or facilitating lawful reproductive health care. Certain disclosures require a signed attestation confirming the request is not for prohibited purposes.

4) Your Authorization Is Required for Other Disclosures

Except as described above, we will not use or disclose your medical information unless you authorize KHC in writing. You may revoke your permission at any time, effective only after the date of your written revocation.

Any information disclosed pursuant to your authorization may be subject to redisclosure by the recipient and may no longer be protected by the HIPAA Privacy Rule. However, SUD treatment records disclosed under 42 CFR Part 2 may not be redisclosed unless expressly permitted by your authorization or by federal law.

KHC will not sell your PHI or use it for marketing without your written authorization, except for limited permitted communications.

5) You Have Rights Regarding Your Medical Information

You have the following rights, provided you make a written request on the form provided by KHC:

• Right to request restriction (including the right to restrict disclosures to a health plan when you pay out‑of‑pocket in full)
• Right to confidential communications (including the right to request non‑electronic communication channels)
• Right to inspect and copy your medical information, including electronic copies of EHR information, and the right to direct KHC to transmit a copy to a third party
• Right to request amendment
• Right to accounting of disclosures, including those made through an EHR as required by law
• Right to a paper copy of this Notice
• Right to breach notification
• Right to opt out of fundraising communications
• Right regarding SUD treatment records — You have specific rights under 42 CFR Part 2, including the right to authorize or refuse disclosure of your SUD information (except where federal law permits disclosure), the right to receive a list of disclosures made with your authorization, and the right to be notified if your SUD information is involved in a breach.

KHC will not require you to waive your rights as a condition of treatment and will not retaliate against you for exercising your rights.

6) State‑Specific Requirements

Many states have requirements for reporting population‑based activities relating to improving health or reducing health care costs. Some states have separate privacy laws that may apply additional requirements regarding HIV/AIDS, mental health, genetic tests, alcohol and drug abuse, sexually transmitted diseases, reproductive health information, and child or adult abuse or neglect.

If state law is more stringent than federal law, the state law applies. For SUD treatment records protected by 42 CFR Part 2, federal law may provide additional protections that apply in addition to state‑specific requirements.

7) Requirements Regarding This Notice

KHC is required by law to provide you with this Notice. We will be governed by this Notice for as long as it is in effect. KHC may change this Notice, and changes will apply to all medical information we maintain. You may request a copy of the Notice in effect at any time.

8) Complaints

If you believe your privacy rights have been violated, you may file a complaint with KHC or with the Secretary of the U.S. Department of Health and Human Services. You will not be penalized or retaliated against.

Contact the KHC Privacy Officer at (907) 375-5200 if you have questions, wish to request restrictions, or wish to exercise your rights.

Complaints may be sent to:

Kidney & Hypertension Clinic of Alaska

4015 Lake Otis Pkwy. Suite 201

Anchorage, AK 99508

Attn: Privacy Officer

Confidential Fax: 907-375-5201