HIPAA and Your Health Information

How HIPAA applies to your care

The Health Insurance Portability and Accountability Act (HIPAA) sets federal rules for how health care providers, and the companies that work with them, handle protected health information. In the Atlas experience there are two roles. Your care team is the covered entity. Atlas is a business associate. That difference decides who holds your records, who you contact to exercise your rights, and what each of us is allowed to do.

Your care team is the covered entity

OpenLoop Healthcare Partners, PC, together with OpenLoop Healthcare Partners California PC and Untitled Health PLLC, operates as an affiliated covered entity under HIPAA. Their licensed clinicians create and hold your medical record: intake responses, visit notes, lab results, prescriptions, and treatment plan.

Their Notice of Privacy Practices describes how they use and disclose your protected health information and the rights you have with respect to it. You can read it at https://openloophealth.com/notice-of-privacy-practices. You are offered that notice when you begin care.

Atlas is a business associate

Atlas provides non-clinical membership services to support your care. To do that, Atlas may need access to some of your protected health information, such as your intake responses before they reach your care team, or the status of an order. Atlas does this under a written business associate agreement with your care team.

That agreement requires Atlas to:

• use and disclose protected health information only as the agreement and HIPAA permit;
• protect it with appropriate administrative, technical, and physical safeguards;
• report any breach or unauthorized use to your care team;
• ensure that any vendor of ours that handles it agrees to the same restrictions; and
• return or destroy it when the agreement ends, where feasible.

Atlas does not use protected health information for marketing and does not sell it.

Membership information and health information

Not everything Atlas holds is protected health information. Your contact details, account settings, payment history with Atlas, and website activity are membership information covered by our Privacy Policy. Answers you give about your health, and anything your care team creates, are protected health information. Some information, such as your name and email, can be both: it is membership information when you sign up, and it becomes part of your health record once it is attached to your care.

Your rights under HIPAA

Under HIPAA, you have the right to:

• get an electronic or paper copy of your medical record, usually within 30 days of asking;
• ask your care team to correct information you believe is wrong or incomplete;
• receive a list of certain disclosures of your information, called an accounting of disclosures;
• ask for limits on how your information is used or shared;
• ask to be contacted in a specific way or at a specific address;
• get a paper or electronic copy of your care team’s Notice of Privacy Practices;
• choose someone to act for you, such as a person with medical power of attorney; and
• file a complaint if you feel your rights have been violated.

Your care team will not retaliate against you for filing a complaint.

How to exercise your rights

Requests about your medical record go to your care team, not to Atlas. Contact their privacy officer:

• OpenLoop Healthcare Partners, PC, Privacy Officer
• Email: privacy@openloophealth.com
• Phone: (844) 819-7956
• Mail: OpenLoop Health, Inc., 909 Locust Street #200, Des Moines, IA 50309

If you contact Atlas with a request about your medical record, we will forward it to your care team and tell you that we have done so. Requests about your membership information go to Atlas at info@joinatlashealth.com.

How Atlas protects health information

Atlas uses administrative, technical, and physical safeguards for protected health information, including access limited to team members who need it, encryption in transit, and written agreements with the vendors that host our systems or handle information for us. Team members who work with health information are trained on HIPAA. If a breach of unsecured protected health information affects you, you will be notified as HIPAA requires.

Filing a complaint

If you believe your privacy rights have been violated, you can file a complaint with your care team using the contact details above. You can also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at https://www.hhs.gov/hipaa/filing-a-complaint/index.html or by calling 1-800-368-1019. Filing a complaint will not affect your care or your membership.

How to contact us

Questions about this page or about how Atlas handles information can be sent to info@joinatlashealth.com or by mail to Atlas Health LLC, 3925 Rogers Rd, Spring Valley, CA 91977.

Questions about your medical record go to your care team: OpenLoop Healthcare Partners, PC, privacy@openloophealth.com, (844) 819-7956.