Privacy Policy

This Notice describes your rights and certain obligations we have regarding the use and disclosure of your medical information. If you have any questions regarding this Notice, please call Nascentia Health’s Privacy Officer at 315-477-4663.

We are required by law to:

• maintain the privacy and security of your medical information
• give you a copy of this Notice describing our legal duties and privacy practices with respect to medical information about you
• follow the terms of the Notice that is currently in effect
• notify you of a breach of unsecured protected health information.

Who this Notice Applies To:

This Notice describes the privacy practices of Nascentia Health, Inc and our Affiliated Covered Entities. An Affiliated Covered Entity is a group of organizations under common ownership or control who designate themselves as a single Affiliated Covered Entity for purposes of compliance with the Health Insurance Portability and Accountability Act (“HIPAA”). Our Affiliated Covered Entity includes Nascentia Home Aids, Nascentia Health at Home, Nascentia Independent Care, Nascentia Community Care, and Nascentia Health Options (collectively referred to herein as “Nascentia Health”).  This Notice applies to the delivery of health care services by Nascentia Health and all protected health information (PHI) and records that we generate. The entities covered by this Notice may share your health information with each other as necessary to carry out the treatment, payment, or health care operations purposes detailed in this Notice. 

The following personnel will follow the privacy practices described in this Notice:

• All health care professionals authorized to enter information into your medical record maintained by Nascentia Health;
• All Nascentia Health employees, staff members, and other personnel with access to your medical record or involved in your care, including students and any volunteers we allow to help you while you receive services from Nascentia Health as a patient; and
• Nascentia Health contractors involved in your care.

If you have any questions regarding this Notice, please call Nascentia Health’s Privacy Officer at 315-477-4663.

I. HOW WE MAY USE AND DISCLOSE MEDICAL INFORMATION ABOUT YOU
The following describes how we may use and disclose your health information for treatment, payment, and healthcare operations. Not every type of use or disclosure is listed below, but the ways in which we use or disclose your information will be under one of these purposes. In addition, depending on the nature of the health information, such as HIV-related, genetic, and mental health information, we may be subject to stricter use and disclosure requirements under state law. We shall follow such requirements.

For Treatment: We may use medical information about you to provide you with medical treatment or services. We may disclose medical information about you to doctors, nurses, or other personnel who are involved in your care. We may also share medical information about you with other Nascentia Health personnel or non-Nascentia Health providers, agencies, or facilities in order to provide or coordinate the different things you need. We also may disclose medical information about you to people outside Nascentia Health who may be involved in your continuing medical care such as other health care providers, transport companies, community agencies and family members.

For Payment: We may use and disclose your medical information so that the treatment and services you receive from Nascentia Health may be billed to and payment may be collected from you, an insurance company or a third party. For example, the information on or accompanying the bill to your health plan may include information that identifies you, as well as your diagnoses, procedures, and supplies used so that your health insurance plan will pay for your services. We may also tell your health plan about a proposed treatment to determine whether your plan will cover the treatment. 

For Health Care Operations: We may use and disclose medical information about you for Nascentia Health Care (i.e. business) Operations. These uses and disclosures are made for quality of care, medical staff activities, and health sciences education within Nascentia Health. In addition, your medical information may also be used or disclosed to comply with law and regulations, for contractual obligations or in connection with billing activities.

II. USES AND DISCLOSURES OF INFORMATION IN SPECIAL SITUATIONS
We may use or disclose your health information in certain special situations as described below, without authorization, to the extent such uses and disclosures comply with federal and state law.

Treatment Alternatives: We may tell you about possible treatment options or alternatives that may be of interest to you.

Health-Related Benefits and Services: We may contact you to tell you about benefits or services that may be of interest to you.

Fundraising Activities: Unless you elect not to receive fundraising communications, we may contact you to provide information about Nascentia Health sponsored activities, including fundraising programs and events. In these instances, we only use contact information, such as your name, address and phone number and the dates you received treatment or services at Nascentia Health. You have the right to request that we not contact you for subsequent fundraising events.

Business Associates: We may use or disclose information to a person or entity we contract with to perform certain services for on our behalf called a “Business Associates”. For example, certain IT and legal services are provided by Business Associates who need access to your health information. We require all Business Associates to appropriately safeguard your information with the diligence that we would and in accordance with state and federal regulations.

Health Information Exchanges; Data Exchange Technologies:  Nascentia Health may access, share, store and/or transmit your medical information, including sensitive information related to HIV, sexually transmitted diseases, , mental health, drug and alcohol treatment, genetic testing, and reproductive health, electronically or otherwise through the “SHIN-NY”, a statewide health information exchange network, and with other Health Information Exchanges (“HIEs”) for treatment, payment and health care operations purposes.  Nascentia Health also uses data exchange technologies (such as record locator services, health information services providers, and provider portals with its electronic health record to exchange your medical records for permitted purposes.  HIEs and data exchange technology providers function as our Business Associate, enabling the sharing of your health records for continuity of care and to improve the quality of health care services provided to you (i.e., avoiding unnecessary duplicate testing). These entities must implement administrative, technical, and physical safeguards that reasonably and appropriately protect the confidentiality, integrity, and security of your medical information. Applicable law may provide you with rights to restrict, opt-in, or opt-out of HIE(s). For more information please contact Nascentia Health’s Privacy Officer using the contact information provided above.

De-identified Data: We may use your PHI to create data that cannot be linked to you by removing certain elements from your PHI, such as your name, address, telephone number, and medical record number.  We may use such de-identified information for certain business purposes, or disclose your PHI to a business associate for the purpose of creating de-identified information.  For example, we may use de-identified information to create summary reports or to monitor trends in order to help us improve services delivery.

Care Transitions: We may disclose your medical information to other health care providers and organizations who may potentially help coordinate and improve the services you receive.  These communications help us manage your care and ensure you get necessary follow-up services to stay healthy.  For example, we may talk to a hospital to see what services are available to help you manage your health at home.

News Gathering Activities: We may contact you or a family member when a news reporter has requested an interview with you. If you choose to participate in the interview, the staff member will obtain your written authorization to do so, and a copy of this authorization will be kept in your medical record.

Individuals Involved in Your Care or Payment for Your Care: Unless you object, we may disclose your medical information to anyone involved in your medical care, e.g., a friend, family member, personal representative, or any individual you identify. We may also give your medical information to someone who helps pay for your care. We also may disclose the health information of minor children to their parents or guardians unless such disclosure is otherwise prohibited by law.

Disaster Relief Efforts: We may disclose your medical information to an entity assisting in a disaster relief effort so that your family can be notified about your condition, status and location.

As Required By Law: We will disclose medical information about you when required to do so by federal or state law. For example, we may disclose health information about you to federal officials for intelligence, counterintelligence and other national security activities authorized or required by law.

Cancer Registry: If you have a newly diagnosed cancer, we will release your medical information to the New York State Cancer Registry.

Research: We may use and disclose your medical information for research purposes if the research organization has satisfied certain conditions protecting the privacy of the health information.

To Avert a Serious Threat to Health or Safety: We may use and disclose medical information about you when necessary to prevent or lessen a serious and imminent threat to your health and safety or the health and safety of the public or another person. Any disclosure would be to someone able to help stop or reduce the threat.

Organ and Tissue Donation: We may release your medical information to organizations that handle organ procurement or organ, eye, or tissue transplantation.

Workers Compensation: We may use or disclose medical information about you for Workers’ Compensation or similar programs as authorized or required by law. These programs provide benefits for work-related injuries or illness

Military and Veterans: If you are or were a member of the Armed Forces, we may release medical information about you to military command authorities as authorized or required by law. We may also release medical information about foreign military personnel to the appropriate military authority as authorized or required by law.

Public Health & Safety: As required by or authorized by law, we may disclose medical information about you for public health purposes. These purposes generally include the following:

• preventing or controlling disease, injury or disability;
• reporting vital events such as births and deaths;
• reporting suspected child abuse or neglect;
• reporting adverse events or surveillance related to food, medications or defects or problems with products;
• notifying persons of recalls, repairs or replacements of products they may be using;
• notifying a person who may have been exposed to a disease or may be at risk of contracting or spreading a disease or condition;

Health Oversight Activities: We may disclose your medical information to governmental, licensing, auditing, and accrediting agencies as authorized or required by law. These oversight activities include, for example, audits, investigations, inspections and licensure. These activities are necessary for the government to monitor the health care system, government programs, and compliance with civil rights laws.

Lawsuits and Other Legal Actions: In connection with lawsuits or other legal proceedings, we may, as authorized or required by law, disclose medical information about you in response to a court or administrative order, or in response to a subpoena, discovery request, warrant, summons or other lawful process.

Law Enforcement: If asked to do so by law enforcement, and as authorized or required by law, we may release your medical information in response to a court order, subpoena, warrant, summons or similar, about alleged criminal conduct at Nascentia Health and to report certain crimes.

Coroners, Medical Examiners and Funeral Directors: In most circumstances, we may disclose your medical information to a coroner or medical examiner. This may be necessary, for example, to identify a deceased person or determine cause of death. We may also disclose your medical information to funeral directors as necessary to carry out their duties.

Protective Services for the President and Others: As authorized or required by law, we may disclose medical information about you to authorized federal officials so they may conduct special investigations or provide protection to the President of the United States, other authorized persons or foreign heads of state.

Inmates: If you are an inmate of a correctional institution or under the custody of law enforcement officials, we may release medical information about you to the correctional institution as authorized or required by law as may be necessary to ensure your health and safety or the health and safety of others.

Incidental Uses and Disclosures: In order to ensure that communications essential to providing quality healthcare would not be hindered, incidental disclosures may occur, such as someone overhearing your name in connection with the services we provide. We will make reasonable efforts to limit these incidental disclosures.

III. SPECIAL CONSIDERATIONS

We will follow restrictions under state and federal law that provide additional protection on the use and disclosure of certain information, such as HIV/AIDS-related information, mental health information, genetic information, and certain information related to minors. In addition, we will comply with the additional protections for Substance Use Disorder (SUD) treatment information under 42 CFR Part 2 (“Part 2”) to the extent that we receive such information from a chemical dependency program covered by 42 CFR Part 2. Where use and disclosure is more limited by 42 CFR Part 2, we will abide by such restrictions. The following additional restrictions apply to SUD information:

• i. Single Consent for Treatment, Payment and Health Care Operations: You may provide a single consent to your SUD provider for all future uses or disclosures of your SUD information for treatment, payment and health care operations purposes. Records that are disclosed for such purposes by your SUD provider to a HIPAA covered entity like Nascentia Health, may be re­disclosed by Nascentia Health without your written consent to the extent the HIPAA regulations permit such disclosure, except for uses and disclosures for civil, criminal, administrative, or legislative proceedings against you.
• ii. For Judicial Proceedings: We may disclose information or records about you in response to a court order and subpoena (or other similar legal mandate) that complies with the requirements of Part 2 or based on your specific written consent. Records (or testimony based on such records) shall not be used in civil, criminal, administrative, or legislative proceedings without your specific written consent or a court order, which court order must be accompanied by a subpoena or other legal mandate compelling disclosure. Where required by law, notice and an opportunity to be heard will be provided to you or Nascentia Health prior to such use and disclosure.

IV. YOUR RIGHTS REGARDING MEDICAL INFORMATION ABOUT YOU

Your medical record is the property of Nascentia Health. You have the following rights, however, regarding medical information we maintain about you. If you would like to exercise one or more of these rights listed above, please submit your request in writing to Nascentia Health ATTN: HIM Department at 1050 West Genesee Street, Syracuse, NY 13204:

Right to Visually Inspect and Receive a Copy: With certain exceptions, you have the right to visually inspect and/or receive a copy of your medical information. If you request a copy of the information, there is no fee for copies. We may deny your request to visually inspect and/or to receive a copy in certain limited circumstances. When access is granted for visual inspection, Nascentia Health will provide visual access to the requested PHI within 5 days.  If space is not available for visual inspection, Nascentia Health must provide a copy within 5 days. To receive a copy of your medical records, a written authorization for release of medical information must be submitted to Nascentia Health’s Health Information Department. Nascentia Health will respond to the request within 30 days of request either by sending the requested information or an explanation of why it cannot be sent within that 30 days. Nascentia Health may have a one-time extension of 30 days (for a total of 60 days) provided that a written notice to the patient stating the reason for the delay and the expected date is sent prior to the expiration of the initial 30 days. If you are denied access to your medical information, you may request an appeal of such denial through the New York State Department of Health. Contact Nascentia Health at (315) 671-5121 to obtain a form to request such an appeal. If your medical information is maintained in an electronic health record, you also have the right to request that an electronic copy of your record be sent to you or to another individual or entity.

Right to Request an Amendment: If you feel that medical information we have about you is incorrect or incomplete, you may ask us to amend your medical information. You have the right to request an amendment for as long as the information is kept by or for Nascentia Health. To request an amendment, your request must be made in writing and submitted to Nascentia Health. In addition, you must provide a reason that supports your request. In addition, we may deny your request if you ask us to amend information that:

• was not created by Nascentia Healthwas not created by Nascentia Health;
• is not part of the medical information kept by or for Nascentia Health;
• is not part of the information which you would be permitted to inspect and copy; or
• is accurate and complete in the record.

Right to an Accounting of Disclosures: You have the right to receive a list of the disclosures we have made of your medical information unless the disclosure was for treatment, payment, health care operations. Certain other disclosures are not included in the list, including disclosures you authorized us to make; disclosures made to you, or to your family and friends involved in your care; disclosures made to federal officials for national security purposes; disclosures made to correctional facilities; and disclosures made six years prior to your request. To request this accounting of disclosures, you must submit your request in writing to Nascentia Health. Your request must state a time period that may not be longer than the six previous years and may not include dates before April 14, 2003. Nascentia Health will provide you one accounting within any 12-month period at no cost. If you request a second accounting within that 12-month period, there will be a charge for the cost of compiling the accounting. We will notify you of the cost involved and you may choose to withdraw or modify your request at that time before any costs are incurred.

Right to Receive Notice of a Breach: We are required to notify you by first class mail or by e-mail (if you have indicated a preference to receive information by e-mail), of any breaches of Unsecured Protected Health Information as soon as possible, but in any event, no later than 60 days following the discovery of the breach. “Unsecured Protected Health Information” is information that is not secured through the use of a technology or methodology identified by the Secretary of the U.S. Department of Health and Human Services to render the Protected Health Information unusable, unreadable, and undecipherable to unauthorized users. 

Right to Request Restrictions: You have the right to request a restriction or limitation on the medical information we use or disclose about you for treatment, payment or health care operations. You also have the right to request a limit on the medical information we disclose about you to someone who is involved in your care or the payment for your care, such as a family member or friend. Generally, we are not required to agree to your request and we may say “no” if it would impact your care. However,  you have the right to restrict the disclosure of your health information to a health plan (your health insurer) related to services or items we provide to you where you pay us for such services or items we provide to you out-of-pocket in full and we must agree, unless we are required by law to disclose the information. Please note: This restriction will apply only when requested and services are paid in full. Future services without a restriction request and for which no out-of-pocket payment is received will be billed per provider and health plan policy, which may include current provider notes that reference prior treatments or services previously restricted. To request a restriction, you must make your request in writing to Nascentia Health.  In your request, you must tell us (1) what information you want to limit; (2) whether you want to limit our use, disclosure or both; and (3) to whom you want the limits to apply. We are not required to agree to your request. If we do agree, our agreement must be in writing, and we will comply with your request unless the information is needed to provide you emergency treatment.

Right to Request Confidential Communications: You have the right to request that we communicate with you about medical matters in a certain way or at a certain location. For example, you may ask that we contact you only at home or only by mail. To request confidential communications, you must make your request in writing to Nascentia Health. We will accommodate all reasonable requests. Your request must specify how or where you wish to be contacted.

Right to an Electronic or Paper Copy of This Notice: You have the right to a copy of this Notice. You may ask us to give you a copy of this Notice at any time. Even if you have agreed to receive this Notice electronically, you are still entitled to a paper copy of this Notice. Copies of this Notice are posted on our website.  

Right to Request Information Sharing through Application Programming Interfaces (“API”). You have the right to request or authorize that your electronic PHI in your designated record set be transmitted to you or another person or organization through an API. APIs are computer coding mechanisms that permit two or more electronic computer applications or software programs to communicate with each other and share information. We are required by law to comply with requests regarding API transmissions, subject to certain exceptions. You understand that PHI transmitted through an API at your request will no longer be under our protection and control, will no longer be subject to the protections and rights outlined in this Notice, and may no longer be subject to the same laws, regulations, policies or procedures regarding its confidentiality, security, privacy, use, or disclosure. You understand and agree that you make any request to us to transmit your PHI through an API at your own risk and you assume all liability for the consequences of such action taken by us at your direction. We caution you to confirm any confidentiality, security or privacy protections with respect to your transmitted PHI with the recipient of the PHI prior to submitting a request to us to transmit your PHI through an API.

V. CHANGES TO NASCENTIA HEALTH’S PRIVACY PRACTICES AND THIS NOTICE
We reserve the right to change Nascentia Health’s privacy practices and this Notice at any time. We reserve the right to make the revised Notice effective for medical information we already have about you as well as any information we receive in the future. We will post a copy of the current Notice physically at various locations at Nascentia Health and electronically on the website. The Notice will contain the effective date on the first page in the top right-hand corner. In addition, you may request a copy of the current Notice in effect.

VI. QUESTIONS OR COMPLAINTS
If you have any questions about this Notice, please contact Nascentia Health at (315) 477-4663. If you believe your privacy rights have been violated, you may file a complaint with Nascentia Health or with the Secretary of the United States Department of Health and Human Services, Office of Civil Rights, at the following address:

Centralized Case Management Operations
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Room 509F HHH Building
Washington, DC 20201
Website: https://www.hhs.gov/civil-rights/filing-a-complaint/index.html
Email: OCRComplaint@hhs.gov

To file a complaint with Nascentia Health, contact the Privacy Officer, telephone number 315-477-4663. Violation of Part 2 is a crime. You may report suspected violations of Part 2 in the same manner as HIPAA violations are reported as described above. You will not be penalized for filing a complaint.

VII. USES AND DISCLOSURES REQUIRING WRITTEN AUTHORIZATION
We will only make the following uses and disclosures with your written authorization:

• Uses and disclosures for marketing purposes.
• Uses and disclosures that constitute a sale of protected health information.
• Most uses and disclosures of psychotherapy notes, if we maintain such notes.

VIII. OTHER USES OF MEDICAL INFORMATION
Other uses and disclosures of your medical information not covered by this Notice will be made only with your written authorization. In those instances where your prior written permission for the use and disclosure of your health information is necessary, we will provide you with Nascentia Health’s Authorization Form for you to sign. You may revoke your authorization, in writing, at any time. If you revoke your authorization, we will no longer use or disclose medical information about you for the reasons covered by your authorization. You understand that we are unable to take back any disclosures we have already made with your permission, and that we will retain our records of the care provided to you as required by law.

Website Privacy Policy
Through our website we may collect information in the following ways:

• when you voluntarily provide information through contact forms;
• passively through technology such as “cookies”

In our contact forms we ask for personal identifying information such as name, email, phone number, best time to contact. This information is only used to contact you regarding your inquiry. Completing the form is entirely voluntary.

When visiting our website to view content and/or download Information. we use Google Analytics to gather and store certain information about your visit automatically. Any of the information collected does not personally identify you.

The information we collect includes:

• Log and Usage Data
  • This includes your IP address, device information, browser type, and information about your activity (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take.
• Device Data
  • This includes data such as information about your computer, phone, tablet, or other device you use to access our website. Depending on the device used, this may include information such as your IP address (or proxy server), location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
• Location Data
  • This includes information about your device’s location including city, state and country. How much information we are able to collect depends on the type and settings of the device you use to the website.
• Demographic Data
  • This includes demographic data such as age, gender, and interests.

Any of the information we collect from you may be used to respond to user inquiries, improve your user experience, and identify website usage trends.

We have processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

If you would like to opt out of our tracking, please contact web@nascentiahealth.org.

Qgiv, the online fundraising platform used by Nascentia Health, is a third-party service that uses cookies and other tracking technologies to help enhance site navigation, analyze site usage, and assist in marketing efforts. No optional cookies are shared with third parties. If you would like to opt out of optional cookies you can find details of how to submit a verifiable consumer request in Qgiv’s Privacy Policy.

Revised 01/2026