HIPAA Compliant Business Associate

The privacy of your health information is important to us. We are required by federal and state laws to protect the privacy of your health information. We must give you notice of our legal duties and privacy practices concerning your health information, including:

• We must protect information that we have created or received about your past, present, or future health condition, health care provided to you, or payment for your health care.
• We must notify you about how we protect your health information.
• We must explain how, when and why we use or disclose your health information.
• We may only use or disclose your health information as we have described in this Notice.

We are required to abide by the terms of this Notice. We reserve the right to change the terms of this Notice and to make new Notice provisions effective for all health information that we maintain. We will post a revised Notice in our offices, make copies available to you upon request and post the revised Notice on our website.

• Right to Access and Copy Your Health Information.
• Right to Request Restrictions on Uses and Disclosures of Your Health Information.
• Right to Request an Amendment of Your Health Information.
• Right to Request and Accounting of Disclosures of Health Information.
• Right to Request Confidential Communications.
• Right to Receive a Copy of This Notice.

We typically use or share your health information in the following ways:

• Required By Law: Arkatechture makes uses and disclosures of protected health information as required by law by referring the inquiry back to the client.
  • Arkatechture uses and discloses protected health information to the extent the use or disclosure is required by law and limits the use or disclosure to the relevant requirements of the law.
• Treatment, Payment & Health Care Operations: 
  • Arkatechture is neither treating patients nor billing for services rendered to patients. Therefore, no policy with regards to treatment or payment are required. 
  • Arkatechture uses and discloses protected health information for its own health care operations as well as the health care operations of the client.
• Public Health Activities:
  • Arkatechture, as a business associate, will only receive information second-hand from a covered entity. Therefore, all inquiries or requests from public health authorities will be referred to the client by the Privacy Officer.
• Health Oversight Activities: Arkatechture discloses protected health information to a health oversight agency for oversight activities authorized by law, including:
  • Audits; civil, administrative or criminal investigations or proceedings; inspections; licensure or disciplinary actions; or other activities necessary for appropriate oversight of the health care system and determining compliance with government benefit programs. 
• Judicial and Administrative Proceedings
• Law Enforcement Purposes: Arkatechture discloses protected health information for law enforcement purposes without an Authorization or providing the patient an opportunity to agree or object in accordance with this policy. Arkatechture will notify the client if clients’ data is used or disclosed during such an event.

If you want more information about our privacy practices or have questions or concerns, please contact our Privacy Officer. If you are concerned that your privacy rights have been violated, you may file a complaint to the covered entity (our client). You may also submit a written complaint to the U.S. Department of Health and Human Services upon request. We support your right to the privacy of your health information. We will not retaliate in any way if you choose to file a complaint with us, the covered entity or with the U.S. Department of Health and Human Services. 

Privacy Officer Contact Information:

Howard Lombard, Information Security Officer

Address: 75 Washington Ave, Portland, ME 04101

Tel: (207) 619-1849