Privacy

Patients have the right to control whether any Data User can access his or her medical information. Each Data User involved in a patient's care must obtain a patient's Consent separately to access medical information through BHIX. No Participant will deny medical care and insurance eligibility will not be affected if a patient does not participate in BHIX.

What Information can be Accessed:

Data Suppliers: Information accessed through BHIX comes from a variety of Data Suppliers. These Data Suppliers may include health care providers (such as clinical practices, pharmacies and clinical laboratories), health insurers, the New York State Medicaid program and other health information exchanges.

Types of Information:

Information accessed through BHIX includes ALL medical information, including but not limited to, sensitive information related to HIV/AIDS, mental health, genetic disease or tests, alcohol or drug abuse, sexually transmitted diseases and family planning.

The Patients Right to Control Access:

If a patient has not indicated whether they Give or Deny Consent to a Data User on a BHIX Patient Consent Form, authorized users may only access medical information through BHIX in an emergency.

Give Consent: In order to allow a Data User to access medical information through BHIX, a patient must indicate "Give Consent" on a BHIX Patient Consent Form and return this form to the appropriate Data User. If a patient gives consent, only individuals involved in giving or improving the quality of medical care and authorized by the Data User to use BHIX will be able to access medical information.

Deny Consent: If a patient does not want to allow a Data User to access his/her medical information through BHIX — even in an emergency — a patient must indicate "Deny Consent "on a BHIX Patient Consent Form and return this form to the appropriate Data User.

Important Note about Emergencies: If a patient Denies Consent using the BHIX Patient Consent Form, the Data User will not be able access the patient's medical information through BHIX — even in an emergency.

Withdrawal of Consent: If a patient wishes to change his or her mind and Withdraw Consent for a Data User to routinely access medical information through BHIX, a patient must complete a BHIX Withdrawal of Consent Form and return it to the appropriate Data User.

How BHIX Protects the Privacy and Confidentiality of Information:

Participants follow New York State and Federal privacy and confidentiality laws. Participants are permitted to look at a patient's health information through BHIX only if they are involved in giving care or improving the quality of medical care they deliver to their patients. BHIX maintains safeguards to prevent your medical information from being obtained by others for improper purposes.