JÄRN HAUS MD

Notice of Privacy Practices/HIPPA

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: 6/1/2026

 

Our Commitment to Your Privacy

Järn Haus MD PLLC ("Järn Haus MD," "we," "us," or "our") is required by law to maintain the privacy of your protected health information (PHI), provide you with this Notice of our legal duties and privacy practices, and follow the terms of this Notice currently in effect. PHI is information that identifies you and relates to your past, present, or future physical or mental health condition, the provision of health care to you, or payment for health care services.

How We May Use and Disclose Your Protected Health Information

We may use and disclose your PHI for the following purposes without your written authorization:

Treatment

We may use and disclose your PHI to provide, coordinate, and manage your health care and related services. This includes sharing information with other health care providers involved in your care, such as laboratories, pharmacies, specialists, or emergency departments to which you may be referred.

Payment

We may use and disclose your PHI to obtain payment for health care services we provide to you. This may include billing, claims management, and collection activities, as well as disclosures to your health plan to obtain prior authorization or determine eligibility for benefits.

Health Care Operations

We may use and disclose your PHI for our health care operations, which include activities necessary to run our practice and ensure quality care. Examples include quality assessment and improvement, case management, care coordination, staff training, business planning, compliance activities, and professional review.

Appointment Reminders and Health-Related Communications

We may use your PHI to contact you with appointment reminders, treatment alternatives, or other health-related benefits and services that may be of interest to you.

As Required by Law

We may use or disclose your PHI when required to do so by federal, state, or local law.

Public Health Activities

We may disclose your PHI for public health activities, including reporting to public health authorities for the purpose of preventing or controlling disease, injury, or disability, and reporting adverse events and product defects to the FDA.

Health Oversight Activities

We may disclose your PHI to a health oversight agency for activities authorized by law, such as audits, investigations, inspections, and licensure actions.

Judicial and Administrative Proceedings

We may disclose your PHI in response to a court order or administrative tribunal. We may also disclose PHI in response to a subpoena, discovery request, or other lawful process, subject to applicable legal requirements.

Law Enforcement

We may disclose your PHI to law enforcement officials for certain law enforcement purposes, including to comply with a court order, warrant, or similar legal process; to identify or locate a suspect, fugitive, material witness, or missing person; or when necessary to report certain types of wounds or physical injuries.

Coroners, Medical Examiners, and Funeral Directors

We may disclose your PHI to a coroner, medical examiner, or funeral director as necessary for them to carry out their duties.

Organ and Tissue Donation

If you are an organ donor, we may disclose your PHI to organizations involved in organ procurement or transplantation.

Research

Under certain circumstances, we may use and disclose your PHI for research purposes, provided the research has been approved by an institutional review board or privacy board that has reviewed the research proposal and established protocols to ensure the privacy of your information.

Serious Threat to Health or Safety

We may use and disclose your PHI when necessary to prevent or lessen a serious and imminent threat to your health or safety or the health and safety of the public or another person.

Military and Veterans

If you are a member of the armed forces, we may disclose your PHI as required by military command authorities.

Workers’ Compensation

We may disclose your PHI as authorized by and to the extent necessary to comply with workers’ compensation laws or similar programs.

Inmates

If you are an inmate of a correctional institution or under the custody of a law enforcement official, we may disclose your PHI to the institution or official as permitted by law.

Prescription Drug Monitoring Programs

We may disclose your PHI to state prescription drug monitoring programs as required or authorized by law. This includes information about controlled substance prescriptions such as testosterone.

Uses and Disclosures That Require Your Written Authorization

For uses and disclosures not described in this Notice, we will ask for your written authorization before using or disclosing your PHI. This includes, but is not limited to:

• Most uses and disclosures of psychotherapy notes, if applicable

• Uses and disclosures of PHI for marketing purposes

• Disclosures that constitute a sale of PHI

• Other uses and disclosures not described in this Notice

You may revoke an authorization at any time by submitting a written request to us at the address below. Revocation will not affect any uses or disclosures made in reliance on the authorization before it was revoked.

Your Rights Regarding Your Protected Health Information

Right to Access

You have the right to inspect and obtain a copy of your PHI maintained in your medical record and billing records. To request access, submit a written request to us at the address below. We may charge a reasonable, cost-based fee for copies. We will respond to your request within 30 days (or 60 days if we notify you of a need for an extension).

Right to Request Amendment

You have the right to request that we amend your PHI if you believe it is incorrect or incomplete. To request an amendment, submit a written request to us at the address below, including the reason for the amendment. We may deny the request under certain circumstances and will provide a written explanation if we do so.

Right to an Accounting of Disclosures

You have the right to request a list of certain disclosures we have made of your PHI. This accounting does not include disclosures made for treatment, payment, or health care operations, or disclosures you authorized in writing. To request an accounting, submit a written request to us at the address below.

Right to Request Restrictions

You have the right to request that we restrict certain uses and disclosures of your PHI. We are not required to agree to a requested restriction, except that we must agree to restrict disclosures to a health plan for payment or health care operations purposes if the PHI pertains solely to a health care item or service for which you have paid us in full out of pocket.

Right to Request Confidential Communications

You have the right to request that we communicate with you about your health information in a specific way or at a specific location. For example, you may ask that we contact you only at a particular phone number or email address. We will make reasonable efforts to accommodate your request.

Right to a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have previously agreed to receive it electronically. To request a paper copy, contact us at the address below.

Right to Be Notified of a Breach

You have the right to be notified in the event of a breach of your unsecured PHI, as required by federal law.

Our Duties

We are required by law to:

• Maintain the privacy of your PHI

• Provide you with this Notice of our legal duties and privacy practices with respect to your PHI

• Abide by the terms of this Notice currently in effect

• Notify you if we are unable to agree to a requested restriction on how your PHI is used or disclosed

• Accommodate reasonable requests to communicate with you by alternative means or at alternative locations

• Notify you in the event of a breach of your unsecured PHI

We reserve the right to change our privacy practices and the terms of this Notice at any time. Any revised Notice will apply to PHI we already hold as well as information we receive in the future. The current Notice will be posted on our website and available upon request.

Telehealth-Specific Privacy Considerations

Because Järn Haus MD delivers care primarily through telehealth, the following additional considerations apply to the privacy and security of your information:

• All telehealth visits are conducted over HIPAA-compliant, encrypted platforms.

• We verify your identity and physical location at the beginning of each visit.

• We recommend that you participate in telehealth visits from a private location where your conversation cannot be overheard.

• Electronic communications between you and Järn Haus MD, including secure messaging through our patient portal, are encrypted in transit and at rest.

• We use HIPAA-compliant electronic health record and prescribing systems.

• If you communicate with us through non-secure channels (e.g., standard email or text message), there is a risk that your information could be intercepted. We encourage you to use our secure patient portal for sensitive communications.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us at the address below or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

U.S. Department of Health and Human Services

Office for Civil Rights

200 Independence Avenue, S.W.

Washington, D.C. 20201

Toll-free: 1-877-696-6775

Website: www.hhs.gov/ocr/privacy/hipaa/complaints/

Contact Information

For questions about this Notice, to exercise any of your rights, or to file a complaint, contact:

Ragnvaldr Bjornsson, MD

Järn Haus MD PLLC

12 W Rendezvous Road

Daniel, WY 83115

dr.bjornsson@jarnhausmd.com

(307) 203-4684