HIPAA

In 1996, Congress passed the Health Insurance Portability and Accountability Act (HIPAA). This law's intention was to improve portability and continuity of health insurance for groups and individuals; combat fraud, waste, and abuse in insurance and health care; and ensure privacy and confidentiality of protected health information.

We understand your health privacy is important and are committed to protecting your personal health information under the Health Insurance Portability and Accountability Act (HIPAA) Security and Privacy Rules.

Who we cover

Our HIPAA Privacy Officer is responsible for ensuring compliance of the following Hillsborough County departments/offices:

• Aging Services
• Children’s Services
• Fire Rescue
• Health Care Services

If you have a HIPAA complaint against your doctor, hospital, dentist, or any other agency/entity other than those listed above, you will need to contact them directly. We only provide compliance investigations for those Hillsborough County Administrator's departments listed above. 

What are your rights

Under the HIPAA Privacy rule, your rights may include:

• Access your Protected Health Information (PHI)
• Request an amendment to your PHI if you disagree with what is documented
• Request an accounting of disclosure of your PHI
• Request that certain information be restricted from use or disclosure
• Request that certain PHI be communicated in a particular manner to ensure confidentiality
• Withhold authorization for the release of PHI
• Authorize the release of PHI

How we can use Protected Health Information (PHI)

A covered entity is permitted, to use and disclose protected health information without your authorization may include the following purposes:

• Give to you for your review of your PHI
• Treatment, payment, and health care operations
• Incidental to an otherwise permitted use and disclosure such as a judicial or law enforcement exception, as enumerated in the law
• Under the Opportunity to Agree or Object clause, if the individual is unavailable, incapacitated, or in an emergency situation, a covered entity may disclose PHI in the exercise of their professional judgment that the disclosure is in the best interest of the individual
• Public interest and benefit activities
• Limited data set for the purposes of research, public health or health care operations

Complaints

If you think we have violated your HIPAA right, you can visit our File a HIPAA Complaint page to learn about the process. If you are ready to file a complaint, click the button below to fill out the online form.

Other options

You may also make a complaint to the federal government. The Federal HHS Office for Civil Rights (“OCR”) enforces HIPAA. If you believe that we are not complying with the applicable requirements of HIPAA, you may file a complaint with OCR. When filing a complaint with OCR you must:

• File it in writing, either on paper or electronically, by mail, fax, or e-mail
• Name the covered entity involved and describe the acts or omissions you believe violated the requirements of HIPAA
• File within 180 days of when you knew that the act or omission complained of occurred, unless OCR extends the 180-day period for "good cause"

For more information, go to the OCR website.

Notices, Policies & Procedures

Authorization and Request Forms

HHS information

For further information on HIPAA, visit the HHS.Gov - Health Information Privacy site.