Patient Privacy Notice  


Joint Notice of Privacy Practices for Medical Information



We(the facility) provide you (the patient) with health care by working with doctors and many other health care providers (referred to as we, our or us). This is a joint notice of our information privacy practices. The following people or groups will follow this notice:

  • any health care provider who comes to our locations to care for you. These professionals include doctors, nurses, technicians, physician assistants and others.
  • all departments and units of our organization, including skilled nursing, home health, clinics, outpatient services, mobile units, hospice, and emergency department.
  • our employees, students and volunteers, including regional support offices and affiliates.
  • The third party business partners working on our behalf to help provide you with technology tools and assist us with healthcare operations.


We understand that medical information about you is private and personal. We are committed to protecting it. Hospitals, doctors and other staff make a record each time you visit. This notice applies to the records of your care at the facility, whether created by hospital staff or your doctor. Your doctor and other health care providers may have different practices or notices about their use and sharing of medical information in their own offices or clinics. We will gladly explain this notice to you or your family member.

We are required by law to:

  • keep medical information about you private.
  • give you this notice describing our legal duties and privacy practices for medical information about you.
  • notify you as outlined in state and federal law if a breach of unsecured medical information about you has occurred.
  • follow the terms of the notice that is currently in effect.


This section of our notice tells how we may use medical information about you. In all cases not covered by this notice, we will get a separate written permission from you before we use or share your medical information. We will ask you for permission in writing before we use or share your medical information for any of the following reasons:

  • marketing an item or service that is not related to treatment for you or when we are paid to market to you.
  • special notes about you made by therapists and counselors that are not part of your medical record.
  • the sale of your medical information.

You can later cancel your permission by notifying us in writing.

We will protect medical information as much as we can under the law. Sometimes state law gives more protection to medical information than federal law. Sometimes federal law gives more protection than state law. In each case, we will apply the laws that protect medical information the most.

CommonSpirit is a large health system. We may use or share medical information about you (in electronic or paper form) with hospital personnel, including doctors, at any CommonSpirit hospital or facility for treatment, payment and health care operations. Please contact the Facility Compliance Office (at the address at the bottom of the notice) for a list of all CommonSpirit facilities.


Treatment: We will use and share medical information about you for purposes of treatment. An example is sending medical information about you to your doctor or to a specialist as part of a referral.

Payment: We will use and share medical information about you so we can be paid for treating you. An example is giving information about you to your health plan or to Medicare.

Health Care Operations: We will use and share medical information about you for our health care operations. Examples are using information about you to improve the quality of care we give you, for disease management programs, patient satisfaction surveys, compiling medical information, de-identifying medical information and benchmarking.

Appointment Reminders: We may contact you with appointment reminders.

Internet Based Products and Services: Working with third party, we may offer you internet based products or services allowing you to

  • schedule appointments
  • reduce wait times in our emergency rooms
  • help you find a physician or offer you access to your medical information

Treatment options and health-related benefits and services: We may contact you about possible treatment options, health-related benefits or services that you might want.

Fund-raising Activities: We may use limited information to contact you for fundraising. We may also share such information with our fundraising foundation. You may choose to opt out of receiving fund-raising requests or contacts.

Research: We may share medical information about you for research projects, such as studying the effectiveness of a treatment you received. We will usually get your written permission to use or share medical information for research. Under certain circumstances we may share medical information about you without your written permission. These research projects, however, must go through a special process that protects the confidentiality of your medical information.

Facility Directory: Unless you tell us otherwise, we may list your name, location in the hospital, your general condition (good, fair, etc.) and your religious affiliation in our directory. We will give this information (except your religious affiliation) to anyone who asks about you by name. Your religious affiliation will be given only to appropriate clergy members.

Public Health: We may disclose your health information as required or permitted by law to public health authorities or government agencies whose official activities include preventing or controlling disease, injury, or disability. For example, we must report certain information about births, deaths, and various diseases to government agencies. We may use your health information in order to report to monitoring agencies any reactions to medications or problems with medical devices. We may also disclose, when requested, information about you to public health agencies that track outbreaks of contagious diseases or that are involved with preventing epidemics.

Required by Law: We are sometimes required by law to report certain information. For example, we must report assault, abuse, or neglect. We also must give information to your employer about work-related illness, injury or workplace-related medical surveillance. Another example is that we will share information about tumors with state tumor registries.

Public Safety: We may, and sometimes have to share medical information about you in order to prevent or lessen a serious threat to the health or safety of a particular person or the general public.

Health Oversight Activities: We may share medical information about you for health oversight activities where allowed by law. For example, oversight activities include audits investigations or inspections. The activities are necessary for government review of health care systems and government programs.

Coroners, Medical Examiners and Funeral Directors: We may share medical information about deceased patients with coroners, medical examiners and funeral directors to identify a deceased person, determine the cause of death, or other duties as permitted.

Organ and Tissue Donation: We may share medical information with organizations that handle organ, eye or tissue donation or transplantation.

Military, Veterans, National Security and Other Government Agencies: We may use or share medical information about you for national security purposes, intelligence activities or for protective services of the President or certain other persons as allowed by law. We may share medical information about you with the military for military command purposes when you are a member of the armed forces. We may share medical information with the Secretary of the Department of Health and Human Services for investigating or determining our compliance with HIPAA.

Judicial Proceedings: We may use or share medical information about you in response to court orders or subpoenas only when we have followed procedures required by law.

Law Enforcement Arizona & Nevada: We may share medical information about you with police or other law enforcement personnel where permitted or required by state and federal law. For example, if the police present a search warrant or court order, we must produce the information requested.

Law Enforcement California: We may share medical information about you with police (or other law enforcement personnel) without your written permission:

  • If the police bring you to the hospital and ask us to test your blood for alcohol or substance abuse
  • If the police present a search warrant
  • If the police present a court order
  • To report abuse, neglect, or assaults as required or permitted by law
  • To report certain threats to third parties
  • If you are in police custody or are an inmate of a correctional institution and the information is necessary to provide you with health care, to protect your health and safety, the health and safety of others or for the safety and security of the correctional institution.

Family Members, Personal Representative, and Others Involved in Your Care: Unless you tell us otherwise, we may share medical information about you with friends, family members, or others you have named who help with your care or who can make decisions on your behalf about your healthcare.

Disaster Relief Purposes: We may use or share medical information about you with public or private disaster organizations so that your family can be notified of your location and condition in case of disaster or other emergency. We may also use it to help in coordination of disaster relief efforts.

Electronic Sharing and Pooling of Your Information: We may take part in or make possible the electronic sharing or pooling of healthcare information. This helps doctors, hospitals and other healthcare providers within a geographic area or community provide quality care to you. If you travel and need medical treatment, it allows other doctors or hospitals to electronically contact us about you. All of this helps us manage your care when more than one doctor is involved. It also helps us to keep your health bills lower (avoid repeating lab tests). And finally it helps us to improve the overall quality of care provided to you and others. We are involved in the Affordable Care Act and may use and share information as permitted to achieve national goals related to meaningful use of electronic health systems.


Requesting Information about You:

In most cases, when you ask in writing, you can look at or get a copy of medical information about you in paper or electronic format. You may also request that we send electronic copies directly to a person or entity chosen by you. We will give you a form to fill out to make the request. You can look at medical information about you for free. If you request paper or electronic copies of the information we may charge a fee. If we say no to your request to look at the information or get a copy of it, you may ask us in writing for a review of that decision.

Correcting Information about You:

If you believe that information about you is wrong or missing, you can ask us in writing to correct the records. We will give you a form to fill out to make the request. We may say no to your request to correct a record if the information was not created or kept by us or if we believe the record is complete and correct. If we say no to your request, you can ask us in writing to review that denial.

Obtaining a List of Certain Disclosures of Information:

You can ask to receive a list of the disclosures we have made of your medical information for the last six years. Your request must be in writing and state the time period for the listing. The first request in a 12-month period is free. We will charge you for any additional requests for our cost of producing the list. We will give you an estimate of the cost when you request the additional list.

Restricting How We Use or Share Information about You: You can ask that medical information be given to you in a confidential manner. You must tell us in writing of the exact way or place for us to communicate with you.

You also can ask in writing that we limit our use or sharing of medical information about you. For example, you can ask that we use or share medical information about you only with persons involved in your care. Any time you make a written request, we will consider the request and tell you in writing of our decision to accept or deny your request. We are legally required to agree to only one type of restriction request: if you have paid us in full for a health procedure or item for which we would normally bill your health plan, we must agree to your request not to share information about that procedure or item with your health plan.

All written requests or requests for review of denials should be given to our Facility Compliance Office listed at the end of this notice.


We may change our privacy practices from time to time. Changes will apply to current medical information, as well as new information after the change occurs. If we make an important change, we will change our notice. We will also post the new notice in our facilities and on our Web site at: You can ask in writing for a copy of this notice at any time by contacting the CommonSpirit Compliance Office. If our notice has changed, we will give you a copy of the notice the next time you register for treatment.


If you think your privacy rights may have been violated, you may contact the CommonSpirit Compliance Office Hotline at 312-741-7000


Version effective: May 2015