30 HIPAA Individual Rights (cont’d) the denial. The person performing this review will not be the same person who denied your initial request. Disclosure Accounting: You have the right to receive a list of instances in which we or our business associates disclosed your protected health information, including a disclosure involving an electronic health record, for purposes other than treatment, payment, health care operations and certain other activities (Note: this exemption does not apply to electronic health records). We will provide you with the date on which we made the disclosure, the name of the person or entity to which we disclosed your protected health information, a description of the protected health informa- tion we disclosed, the reason for the disclosure, and certain other information. If you request this list more than once in a 12-month period, we might charge you a reasonable, cost-based fee for re- sponding to these additional requests. You may request an account- ing by submitting your request in writing using the information listed at the end of this notice. Your request may be for disclosures made up to 6 years before the date of your request (three years in the case of a disclosure involving an electronic health record). Restriction Requests: You have the right to request that we place additional restrictions on our use or disclosure of your protected health information. We are not required to agree to these additional restrictions, but if we do, we will abide by our agreement (except in an emergency). Any agreement that we might make to a request for additional restrictions must be in writing and signed by a person authorized to make such an agreement on our behalf. We will not be liable for uses and disclosures made outside of the requested restriction unless our agreement to restrict is in writing. We are permitted to end our agreement to the requested restriction by no- tifying you in writing. You may request a restriction by writing to us using the information listed at the end of this notice. In your request tell us: (1) the information of which you want to limit our use and disclosure; and (2) how you want to limit our use and/or disclosure of the information. Confidential Communication: If you believe that a disclosure of all or part of your protected health information may endanger you, you have the right to request that we communicate with you in confi- dence about your protected health information. This means that you may request that we send you information by alternative means, or to an alternate location. We must accommodate your request if: it is reasonable, specifies the alternative means or alternate location, and specifies how payment issues (premiums and claims) will be handled. You may request a Confidential Communication by writing to us using the information listed at the end of this notice. Amend- ment: You have the right to request that we amend your protected health information. Your request must be in writing, and it must ex- plain why the information should be amended. We may deny your request if we did not create the information you want amended or for certain other reasons. If we deny your request, we will provide you with a written explanation. You may respond with a statement of disagreement to be appended to the information you wanted amended. If we accept your request to amend the information, we will make reasonable efforts to inform others, including people you name, of the amendment and to include the changes in any future disclosures of that information. Electronic Notice: This notice is also posted on our web site. Questions and Complaints Information WSSC’s Privacy Practices: If you want more information about our privacy practices or have questions or concerns, please contact the member services number on the back of your card. Filing a Complaint: If you are concerned that we might have violated your privacy rights, or you disagree with a decision we made about your individual rights, you may use the contact information listed at the end of this notice to com- plain to us. You also may submit a written complaint to the U.S. Department of Health and Human Services (DHHS). We will provide you with the contact information for DHHS upon request. We support your right to protect the privacy of your protected health and financial information. We will not retaliate in any way if you choose to file a complaint with us or with the U.S. Department of Health and Human Services. HIPAA website: http://www.hhs.gov/ocr/privacy/ WSSC Privacy Official: Carole C. Silberhorn Human Resources Manager – Benefits 14501 Sweitzer Lane Laurel, MD 20707-5902 Phone: 301-206-8691 Fax: 301-206-8713 Email: Carole.Silberhorn@wsscwater.com Alternate Email: hr_benefits@wsscwater.com