PUBLIC NOTICE: HIPAA Breach Notification. Lifewellness Institute would like to alert its patients that in 2015 cyber intruders may have accessed confidential patient information that was stored on an electronic health record system. Lifewellness Institute used an electronic health record database called PrognoCIS to store patient information. PrognoCIS was created and maintained by Bizmatics. Lifewellness Institute was notified on March 30, 2016, that cyber intruders may have installed malware into PrognoCIS that was not discovered by Bizmatics until the end of 2015. Bizmatics is working with law enforcement and a cyber-security firm on the matter but have been unable to conclude whether or not the patients’ information was actually viewed or acquired. The information stored in the server accessed by the unauthorized users includes, but is not limited to, the following: the patients’ names, addresses, phone numbers, birth dates, marital status, Social Security numbers, insurance information, as well as the entire charted medical history of the patient. Therefore, we urge our patients to closely monitor all accounts and credit information. We do not know if any patient information was accessed but as a matter of caution we want to advise our patients. If you have any questions, please contact our patient inquiry center at the toll free number 1-800-981-7571.
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED OR DISCLOSED AND HOW YOU CAN OBTAIN ACCESS TO INFORMATION. PLEASE REVIEW IT CAREFULY.
Lifewellness Institute is required by law to protect the privacy of your personal health information, provide this notice about our information practices, and follow the information practices that are described herein.
Lifewellness Institute uses your personal health information primarily for treatment, obtaining payment for treatment, conducting internal administrative activities, and evaluating the quality of care that we provide. For example, Lifewellness Institute may use your personal health information to contact you to provide appointment reminders, or information about treatment alternatives or other health related benefits that could be of interest to you.
Lifewellness Institute may also use or disclose your personal health information without prior authorization for public health purposes, for auditing purposes, for research studies and for emergencies. We also provide information when required by law. In any other circumstances, Lifewellness Institute’s policy is to obtain your written authorization before disclosing your personal health information. If you provide us with a written authorization to release your information for any reason, you may later revoke that authorization to stop further disclosures at any time. Lifewellness Institute may change its policy at any time. You may also request an updated copy of our Notice of Information Practices at any time.
On April 17, 2006, California’s governor signed into law a new bill that requires health care providers and laboratories to report cases of HIV infection to the public health department using the patient’s name rather than an anonymous code. This measure complies with new conditions set by the CDC for states to receive federal funding of prevention services and care and treatment services.
The new law also imposes enhanced civil and criminal penalties for willful, malicious, or negligent disclosures of confidential HIV case information.
You have the right to obtain a copy of your personal health information at any time. You have the right to request that we correct any inaccurate or incomplete information in your records. You also have the right to request a list of instances where we have disclosed your personal health information for reasons other than treatment, payment or other related administrative purposes. You may also request in writing that we not use or disclose your personal health information for treatment, payment, or administrative purposes except when specifically authorized by you, when required by law, or in emergency circumstances. Lifewellness Institute will consider all such requests on a case-by-case basis, but the company is not legally required to accept them.
If you are concerned that Lifewellness Institute may have violated your privacy rights or if you disagree with any decisions we have made regarding the disclosure of your personal health information, please contact our office at the address listed below. You may also send a written complaint to the US Department of Health and Human Services. Our address is:
2448 Historic Decatur Road, Suite 130
San Diego CA, 92016