NOTICE OF PRIVACY PRACTICES - VIEW IN ESPAÑOL

This notice describes medical information about you may be used and disclosed and how you may obtain access to this information. Please review it carefully.

Why is Colorado Acute Long Term Hospital providing me with this Notice?
This Notice of Privacy Practices (this "Notice") of NextCare Specialty Hospital of Denver, Inc., a Delaware Corporation d/b/a Colorado Acute Long Term Hospital ("Colorado Acute") is being provided to you in accordance with the requirements of the Standards for Privacy of Individually Identifiable Health Information of the Health Insurance Portability and Accountability Act (the "HIPAA Privacy Rules"). The HIPAA Privacy Rules are federal laws that seek to ensure the privacy and confidentiality of your health information. The HIPAA Privacy Rules require Colorado Acute to take certain actions to protect the privacy of your health information. This Notice has been prepared to advise you of the uses and disclosures of your Protected Health Information (as defined below) that may be made by Colorado Acute and to advise you of your rights and Colorado Acute's legal duties relating to the privacy of your Protected Health Information.

What is Protected Health Information?
"Protected Health Information" means information created or received by Colorado Acute and transmitted or maintained in written, electronic, or any other form that (A) relates to (i) your past, present or future health condition, (ii) the provision of health care to you, or (iii) your past, present, or future payment for the provision of health care; and (B) individually identifies you or could reasonably be used to identify you.

Will Colorado Acute have access to my Protected Health Information?
Yes. Your Protected Health Information will be obtained by your Colorado Acute physician, Colorado Acute's office staff and others outside of Colorado Acute that are involved in your care and treatment for the purpose of providing health care services to you.

When may Colorado Acute use or disclose my Protected Health Information?
The law permits Colorado Acute, and its vendors referred to as "business associates," to use or disclose Protected Health Information to carry out "treatment," "payment" and other "health care operations." Colorado Acute is not required to obtain an authorization from you or to notify you each time it uses or discloses your Protected Health Information for treatment, payment or health care operations purposes. The following are examples of the types of uses and disclosures of your Protected Health Information that Colorado Acute is permitted to make, but the examples are not meant to be exhaustive.

Treatment: "Treatment" means the provision, coordination, or management of health care and related services by health care providers, including the coordination or management of health care by a health care provider with a third party (such as an insurer of Colorado Acute), consultation between providers with respect to a patient, and the referral of a patient for health care from one provider to another. This includes the coordination, management of your health care with doctors, nurses, technicians, medical students, or other hospital personnel who are involved in taking care of patients at the hospital. For example, (i) Colorado Acute may disclose your Protected Health Information, as necessary, to a home health agency that provides care to you, (ii) Colorado Acute may disclose Protected Health Information to other physicians who may be treating you, (iii) your Protected Health Information may be provided to a physician to whom you have been referred to ensure that the physician has the necessary information to diagnose or treat you, (iv) a Colorado Acute physician may need to tell a dietician if you have diabetes so that Colorado Acute can arrange for you the appropriate meals, or (v) Colorado Acute might disclose certain Protected Health Information to facilitate a pharmacy's filling of your prescription. Different departments of the hospital also may share medical information about you in order to coordinate the different things that patients need, such as prescriptions, lab work and x-rays. In addition, Colorado Acute may disclose your Protected Health Information from time-to-time to another physician or health care provider (e.g., a specialist or laboratory) who, at the request of your Colorado Acute physician, becomes involved by providing assistance with your health care diagnosis or treatment. Colorado Acute may also disclose medical information about you to people outside the hospital who may be involved in your medical care after you leave the hospital, such as family members, clergy or others Colorado Acute uses to provide services that are part of your care.

Payment: Your Protected Health Information will be used, as needed, to obtain "payment" for your health care services provided by Colorado Acute. This may include certain activities that your health insurance plan may undertake before it approves or pays for the health care services Colorado Acute recommends for you such as making a determination of eligibility or coverage for insurance benefits, reviewing services provided to you for medical necessity, and undertaking utilization review activities. Another example is obtaining approval for a hospital stay, which may require that your relevant Protected Health Information be disclosed to a health plan to obtain approval for the hospital admission. Likewise, Colorado Acute may disclose your treatment to a health plan in order to obtain prior approval or to determine whether your plan covers the cost for the treatment.

Health Care Operations: "Health Care Operations" means those other functions and activities that Colorado Acute performs in connection with providing health care. These activities include, but are not limited to, quality assessment activities, employee review activities, training of medical students, licensing, credentialing, underwriting, auditing functions, and conducting or arranging for other business and administrative activities. For example, Colorado Acute may disclose your Protected Health Information to medical school students that are in training and seeing patients at our offices. Likewise, Colorado Acute will disclose your information to doctors, nurses, technicians, medical or nursing students, and other hospital personnel for review and learning purposes. Colorado Acute may use your medical information to review its treatment and services and to evaluate the performance of its staff in caring for patients. Colorado Acute may also combine medical and demographic information about many hospital patients in order to decide what additional services the hospital should offer, what services are not needed, and whether certain new treatments are effective. In addition, Colorado Acute may use a sign-in sheet at the registration desk where you will be asked to sign your name and indicate your physician. Colorado Acute may also call you by name in the waiting room when your physician is ready to see you. Colorado Acute will share your Protected Health Information with third party "business associates" that perform various activities (e.g., billing and transcription services) for Colorado Acute. Whenever an arrangement between Colorado Acute and a business associate involves the use or disclosure of your Protected Health Information, Colorado Acute will have a written contract with the business associate that contains terms that will protect the privacy of your Protected Health Information.

May Colorado Acute use or disclose my Protected Health Information for other purposes?
Colorado Acute may use or disclose your Protected Health Information to provide you with appointment reminders or information about your treatment alternatives or other health-related benefits and services that may be of interest to you. Colorado Acute may also contact you in order to raise funds for Colorado Acute. In addition, Colorado Acute may include certain limited information about you in a hospital directory while you are in the hospital. This information may include your name, your location in the hospital, your general condition (e.g., fair, stable, etc.), and your religious affiliation. The directory information, except for your religious affiliation, may also be released to people who ask for you by name. Your religious affiliation may be give to a member of the clergy, such a priest or rabbi, even if they don't ask for you by name. The purpose of this disclosure is so your family, friends and clergy may visit you in the hospital and generally know the status of your medical condition. In general, Colorado Acute may release your Protected Health Information to members of your family or friends who have been previously identified as assisting you. In addition, Colorado Acute may share your Protected Health Information with certain of its vendor, agents or contractors commonly referred to as "business associates" that perform various functions related to the operations and care you receive, such as transcription services.

Does Colorado Acute have to obtain an authorization in order to use or disclose my Protected Health Information for other purposes?
Yes. For uses or disclosures of Protected Health Information that are not made for treatment, payment, or health care operations purposes and for which no exception applies, the law requires Colorado Acute to obtain your written approval for Colorado Acute's disclosure of your Protected Health Information to a particular person or entity for a particular purpose ("Authorization"). You may revoke an Authorization at any time, but a revocation is not effective if Colorado Acute has already reasonably relied on your Authorization to make a particular use or disclosure. Additionally, if you request that Colorado Acute make a use or disclosure of your Protected Health Information to a third party, Colorado Acute may require that you sign an Authorization that permits Colorado Acute to honor your request.

When might Colorado Acute use or disclose my Protected Health Information without my Authorization?
As discussed above, Colorado Acute is not required to obtain your Authorization to use or disclose your Protected Health Information for treatment, payment or health care operations purposes. Additionally, there are some limited exceptions in which the law allows Colorado Acute to use or disclose your Protected Health Information for purposes other than treatment, payment, or health care operations and without your Authorization. Most of these uses or disclosures are permitted to promote the Government's need to ensure a safe and healthy society. In some cases, you may be given on opportunity to agree or object before the use or disclosure is made; in other cases, you may not be given this opportunity. Whenever Colorado Acute makes these types of uses and disclosures, Colorado Acute will make every effort to ensure that it meets any necessary prerequisites and will not use or disclose your Protected Health Information more than is otherwise permitted under the law.

The types of uses or disclosures of Protected Health Information that may be made without your Authorization and without giving you the opportunity to object include those: required by law; for public health activities; for FDA-related purposes; to avert communicable or spreading diseases; for public health activities; to an employer to conduct medical surveillance evaluations, to address work-related illness/workplace injuries and for workers' compensation purposes; for health oversight purposes (such as when the Government requests certain information from Colorado Acute to determine its compliance with applicable laws); when a judge or administrative tribunal orders the release of such Protected Health Information; to properly assist law enforcement agencies to carry out their duties; as required by law for reporting certain types of wounds or other physical injuries; pursuant to a request from a law enforcement official if the individual is a victim of a crime; for purposes of identifying or locating a suspect, fugitive, material witness, or missing person; to a coroner or medical examiner for purposes of identifying a deceased person; to a funeral director as necessary to carry out services; for cadaveric organ, eye and tissue donations (where appropriate); to carry out clinical research that involves treatment where the proper authority has determined the importance for doing so and compliance with the research authorization requirements are followed; to prevent serious and imminent threats to the health or safety of a person; to assist armed forces personnel and operations; for military service and veterans affairs separation/discharge matters; for federal intelligence, counter-intelligence and national security purposes; to help determine veterans eligibility status; to protect the President and other high-ranking officials; and for reporting to correctional institutions/law enforcement officials acting in a custodial capacity.

There are also several types of uses or disclosures of Protected Health Information that Colorado Acute may make without your Authorization as long as, whenever possible, you are given an opportunity to agree or object before Colorado Acute makes the use or disclosure. These exceptions are very limited and generally involve the release of a limited amount of Protected Health Information, and include, but are not limited to, the following purposes: to maintain a directory of individuals; to aid your family members, close personal friends, or persons identified by you to assist in your care, payment of care, or in locating you, or disclosures to disaster relief personnel in order to locate you in the event of an emergency. If you are not available to agree or object to the use or disclosure of Protected Health Information due to your incapacity or an emergency circumstance, then Colorado Acute may, in the exercise of its professional judgment, determine whether the disclosure is in your best interests and, if so, disclose only the Protected Health Information that is relevant to your health care.

Will Colorado Acute use or disclose my Protected Health Information for marketing purposes?
While Colorado Acute does not anticipate using or disclosing your Protected Health Information for marketing purposes, under the HIPAA Privacy Rules, Colorado Acute may only make such uses or disclosures with your Authorization, unless Colorado Acute communicates with you in person or provides you with some promotional gift of nominal value, in which case your Authorization would not be required. In addition, Colorado Acute may send you information about its facilities and other products and services that Colorado Acute believes would be beneficial to you. However, you may contact Colorado Acute's Privacy Officer (referenced on the last page of this Notice) to request these materials not be sent to you.

Do I have the right to request additional restrictions on the uses or disclosures of my Protected Health Information?
Yes. You have the right to request additional restrictions relating to Colorado Acute's use or disclosure of your Protected Health Information beyond those otherwise required under the HIPAA Privacy Rules. Although Colorado Acute is not legally required to grant these requests, it is your right to make such a request. For additional information or to obtain the proper form for making such a request, please contact Colorado Acute's Privacy Officer (referenced on the last page of this Notice).

May I request that certain confidential communications of my Protected Health Information be made to me at alternate locations?
Yes. Colorado Acute may communicate your Protected Health Information to you in a variety of ways, including by mail or telephone. If you believe that Colorado Acute's communications to you by the usual means will endanger you or your health care and you would like Colorado Acute to make its communications that involve Protected Health Information to you at an alternate location, you may contact Colorado Acute's Privacy Officer (referenced on the last page of this Notice) to obtain the appropriate request form. Colorado Acute will only accommodate reasonable requests and may require information as to how payment, if any, will be handled.

Do I have the right to inspect and copy my Protected Health Information?
Yes, subject to certain limitations. You have the right to request and obtain access to inspect and copy your Protected Health Information maintained by Colorado Acute unless the information is (i) psychotherapy notes; or (ii) not required to be accessible under the HIPAA Privacy Rules or other applicable law. For example, you do not have a right to access information compiled by Colorado Acute in anticipation of, or for use in, a civil, criminal or administrative proceeding. In addition, Colorado Acute may deny your request to inspect and copy in certain limited circumstances.

Colorado Acute may charge you a reasonable, cost-based fee for copying (including the cost of supplies and labor) any Protected Health Information required to be copied to adequately respond to your access request, as well as any postage costs and costs associated with preparing an explanation or summary of the Protected Health Information necessary to adequately respond to your access request (unless otherwise precluded by applicable State or other law). If you would like to request access to your Protected Health Information, please notify Colorado Acute's Privacy Officer (referenced on the last page of this Notice) so that you can complete the appropriate forms.

Do I have the right to request an amendment to my Protected Health Information?
Yes. You have the right to request that Colorado Acute amend your Protected Health Information. Colorado Acute reserves the right to deny or partially deny requests for amendments that are not required to be granted under the HIPAA Privacy Rules. For example, Colorado Acute may deny a request for amendment when the Protected Health Information at issue is accurate and complete. If you would like to request an amendment of your Protected Health Information, please notify Colorado Acute's Privacy Officer (referenced on the last page of this Notice) so that you can complete the appropriate forms.

Do I have the right to an accounting of disclosures of my Protected Health Information made by Colorado Acute?
Yes. You have the right to request and obtain a proper accounting of disclosures Colorado Acute has made of your Protected Health Information in the six years prior to the date on which the accounting is requested. Your request should indicate in what form you want the list (e.g., on paper or electronically). Colorado Acute is not required, however, to account for all uses and disclosures of Protected Health Information that Colorado Acute makes. For example, Colorado Acute is not required to provide an accounting for disclosures made for treatment, payment, or health care operations purposes or for disclosures made with your Authorization. Additionally, Colorado Acute reserves the right to limit its accountings to disclosures made after the compliance date of the HIPAA Privacy Rules.

Colorado Acute will provide you with your first accounting at no charge to you. If you request any additional accountings within a 12-month period, Colorado Acute may charge you a reasonable, cost-based fee. At the time that you request a subsequent accounting, Colorado Acute will provide you with information regarding the fees, and you will have the opportunity to withdraw or modify your request if you wish to do so. If you would like to request an accounting of your Protected Health Information, please notify Colorado Acute's Privacy Officer (referenced on the last page of this Notice) so that you can complete the appropriate forms.

If I have an objection to the way my Protected Health Information is being handled, may I file a complaint?
Yes. Colorado Acute has procedures in place for receiving and resolving complaints. If you believe that Colorado Acute has violated your privacy rights or has acted inconsistently with its obligations under the HIPAA Privacy Rules, you may file a complaint by contacting Colorado Acute's HIPAA Privacy Officer by writing a letter addressed to Colorado Acute, Attention: HIPAA Privacy Officer to request a complaint form.
Colorado Acute requests that you attempt to resolve your complaint with Colorado Acute using these complaint procedures since Colorado Acute is in the best position to respond to your complaint. However, if you believe Colorado Acute has violated your privacy rights, you may also file a complaint with the Office of Civil Rights ("OCR") at the United States Department of Health and Human Services ("HHS"). You may contact the HHS OCR at: Medical Privacy, Complaint Division, Office of Civil Rights, United States Department of Health and Human Services, 200 Independence Avenue, S.W., Room 509F, HHH Building, Washington, D.C. 20201, Voice Hotline Number (800) 368-1019, Internet Address www.hhs.gov/ocr.
It is against the policies and procedures of Colorado Acute to retaliate against any person who has filed a privacy complaint, either with Colorado Acute or with HHS OCR. Should you believe that you are being retaliated against in any way upon your filing a complaint with Colorado Acute or the HHS OCR, please immediately contact Colorado Acute's Privacy Officer, so that Colorado Acute may properly address the issue.

May Colorado Acute amend this Notice?
Yes. Colorado Acute may change the terms of this Notice, at any time. The new notice will be effective for all Protected Health Information that Colorado Acute maintains at that time. Upon your request, Colorado Acute will provide you with any revised Notice of Privacy Practices. You may request a revised Notice of Privacy Practices by accessing our website at www.lifecare-hospitals.com, calling the office and requesting that a revised copy be sent to you in the mail or asking for one at the time of your next appointment. In addition, we will post a copy of the revised notice in the hospital, and each time you register at, or are admitted to, Colorado Acute for treatment or health care services as inpatient or outpatient, we will offer you a copy of the current notice in effect.

May I obtain a paper copy of this Notice?
Yes. You have the right to request and receive a paper copy of this Notice. If you received this Notice via the Internet or electronic mail and would like to receive a paper copy, please contact Colorado Acute's Privacy Officer (referenced on the last page of this Notice).

What if I have additional questions that are not answered in this Notice?
If you have any questions, concerns or issues relating to the privacy of your Protected Health Information that is not covered in this Notice, please contact Colorado Acute's Privacy Officer (referenced below).

How do I contact Colorado Acute's Privacy Officer?
You may contact Colorado Acute's Privacy Officer by writing to HIPAA Privacy Officer, Colorado Acute Long Term Hospital, 1601 North Lowell Blvd., Denver, CO 80204 by calling (303) 264-6900 or by facsimile (303) 264-6897.

What is the effective date of this Notice?
This Notice is effective as of April 14, 2003.