Privacy Policy for Afya
Effective Date: January 23 2025
Last Updated: January 23 2025
This Privacy Policy describes how Afya collects, uses, discloses, and protects your medical and personal information in compliance with the Health Insurance Portability and Accountability Act (HIPAA). Please review this notice carefully to understand your rights and how we safeguard your Protected Health Information (PHI).
Your Rights Regarding Protected Health Information (PHI)
You have the following rights with respect to your PHI:
1. Access to Information
• You may request and receive a copy of your PHI, including medical and billing records. Requests must be made in writing, and reasonable fees may apply for copying and mailing.
2. Request for Restrictions
• You may request restrictions on certain uses or disclosures of your PHI. While we will consider your request, we are not required to agree if the restrictions conflict with legal requirements.
3. Amendments
• If you believe your PHI is incomplete or inaccurate, you may request an amendment in writing. If denied, you have the right to submit a statement of disagreement, which will be included in your records.
4. Disclosure Log
• You may request an accounting of disclosures of your PHI for purposes other than treatment, payment, or healthcare operations. The first request in a 12-month period is free; additional requests may incur a fee.
5. Paper Copy of Privacy Policy
• You are entitled to a paper copy of this Privacy Policy, even if you previously agreed to receive it electronically.
6. Right to File a Complaint
• If you believe your privacy rights have been violated, you may file a complaint with Afya or the U.S. Department of Health and Human Services. There will be no retaliation for filing a complaint.
How We Use and Disclose PHI
Afya may use and disclose PHI without your written authorization for the following purposes:
1. Treatment
• We may use or disclose your PHI to healthcare providers involved in your care, including sharing lab results with your physician or other providers.
2. Payment
• We use PHI to bill and collect payment from you, your insurance company, or other third parties.
3. Healthcare Operations
• PHI may be used for administrative purposes such as audits, staff training, and quality improvement activities.
Disclosures Without Your Authorization
We may disclose your PHI without your consent or authorization in specific circumstances, including:
1. Public Health and Safety
• Reporting diseases, injuries, or adverse events to public health authorities.
2. Legal Obligations
• Complying with court orders, subpoenas, or legal processes.
3. Law Enforcement
• Assisting law enforcement officials in criminal investigations or to prevent serious threats to public safety.
4. Health Oversight
• Assisting with audits, inspections, and licensure by authorized government agencies.
5. Abuse or Neglect
• Reporting suspected abuse, neglect, or domestic violence to appropriate authorities.
6. Organ and Tissue Donation
• Assisting with organ or tissue procurement organizations.
7. Military and National Security
• Disclosing PHI to military authorities or federal officials for national security purposes.
8. Judicial and Administrative Proceedings
• Providing information required by law in legal proceedings.
9. Coroners, Medical Examiners, and Funeral Directors
• Assisting with identifying deceased individuals or determining the cause of death.
10. Family or Personal Representatives
• Sharing information about your condition or location with family members or others involved in your care.
HIPAA Compliance
​
Afya complies with the Health Insurance Portability and Accountability Act (HIPAA), which governs the protection of your PHI. Under HIPAA, we:
1. Ensure Privacy and Security
• Implement strict measures to protect the confidentiality and security of your PHI.
2. Limit Disclosure
• Share PHI only for purposes of treatment, payment, or healthcare operations, or as otherwise permitted by law.
3. Authorize Certain Disclosures
• Obtain your explicit consent for disclosures not otherwise permitted by HIPAA regulations.
4. Maintain Records
• Keep records of all PHI disclosures, including verbal, written, and electronic communications.
PHI includes information that identifies you and relates to your past, present, or future physical or mental health, healthcare services, or payment for healthcare services.
How We Protect Your Information
Afya employs rigorous safeguards to protect your PHI:
1. Access Control
• PHI is accessible only to authorized personnel.
2. Data Security
• All digital records are encrypted, and physical records are stored securely.
3. Audit Trails
• We monitor and log all access to PHI to prevent unauthorized access.
4. Training
• Staff members receive regular training on privacy practices and HIPAA compliance.
Changes to This Privacy Policy
Afya reserves the right to update this Privacy Policy at any time. Any changes will be posted on our website with the updated effective date.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
Afya@afya-healthcare.com