Your Information. Your Rights. Our Responsibilities.
THIS NOTICE DESCRIBES HOW MEDICAL AND HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Important Notice: Information disclosed under HIPAA may be subject to redisclosure by the recipient and may no longer be protected by federal privacy law.
Notices of Privacy Practices
Please refer to www.altocare.com/npp for the federal HIPAA Notices of Privacy Practices, this page only covers the applicable State specific requirements.
STATE-SPECIFIC PRIVACY PROTECTIONS
In addition to federal HIPAA requirements, we comply with applicable state privacy laws in the states where we provide services.
How State Laws Interact with HIPAA
When state law provides greater privacy protections than HIPAA, we follow the more protective state law. When HIPAA provides greater protection, we follow HIPAA. Our privacy practices ensure compliance with both federal and applicable state requirements.
Illinois
Enhanced Protections for:
- Mental health and developmental disabilities records (740 ILCS 110)
- HIV/AIDS-related information (410 ILCS 305)
- Genetic testing information (410 ILCS 513)
- Substance abuse treatment records
Record Retention:
- Adults: 7 years from date of last service
- Minors: Until one year after age 18, or 7 years from last service, whichever is longer
Reporting: Illinois law requires reporting of suspected abuse or neglect of adults age 60+ and persons with disabilities.
Health Information Exchange: Illinois participates in health information exchange networks. You may have rights to opt out or control participation under state law (410 ILCS 50).
North Carolina
Common Law Privacy: North Carolina recognizes a common law duty of confidentiality that may extend beyond HIPAA requirements. Healthcare providers must protect patient privacy according to HIPAA-informed standards.
Enhanced Protections for:
- Mental health and substance abuse treatment records (G.S. 122C)
- HIV/AIDS-related information (G.S. 130A-143)
- Genetic testing information (G.S. 95-28.1A)
Record Retention:
- Adults: 11 years from date of last service (or longer if required by Medicare/Medicaid)
- Minors: Until age 19, or 11 years from last service, whichever is longer
Reporting: North Carolina law requires reporting of suspected abuse, neglect, or exploitation of disabled adults and older adults.
Health Information Exchange: North Carolina participates in the state Health Information Exchange network (N.C. Gen. Stat. § 90-414). You may opt out of having your information shared through the network, or rescind your opt-out decision at any time.
Pennsylvania
Medical Record Ownership: Under Pennsylvania law (49 Pa. Code § 16.95), providers own medical records, but patients have the right to access and obtain copies.
Enhanced Protections for:
- Mental health treatment records (50 P.S. § 7111)
- HIV/AIDS-related information (35 P.S. § 7601-7612)
- Genetic testing (35 P.S. § 5631)
- Drug and alcohol treatment records
Record Retention:
- Adults: 7 years from date of last service
- Minors: Until age 19, or 7 years from last service, whichever is longer
Reporting: Pennsylvania law requires reporting of suspected abuse, neglect, or exploitation of older adults and individuals with disabilities.
Breach Notification: Pennsylvania law (73 P.S. § 2303) requires notification of breaches affecting personal information without unreasonable delay. If a breach affects more than 1,000 Pennsylvania residents, we must also notify consumer reporting agencies.
CHANGES TO THIS NOTICE
We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our offices, and on our website.