Clinical services are furnished by MDI Medical Group PC, affiliated professional entities, and licensed Providers. Their Notice of Privacy Practices controls the use of PHI in the medical record. Caliber’s Privacy Policy separately explains Caliber account, website, program, support, and non-clinical data.
1. Which notice applies
Medical records created through a clinical evaluation belong to and are maintained by MDI Medical Group PC, an affiliated professional entity, or the applicable Provider, as permitted by law. Their Notice of Privacy Practices (“NPP”) describes HIPAA uses, disclosures, duties, and patient rights.
Review MDI’s current Notice of Privacy Practices and HIPAA information. The NPP shown to you during intake or in the clinical portal controls if it differs from this guide.
2. Common permitted uses and disclosures
The medical practice may use or disclose PHI for treatment, payment, healthcare operations, communications about your care, and other purposes permitted or required by law. Certain uses—such as many marketing uses, sales of PHI, and most uses of psychotherapy notes—may require a separate written authorization. You may revoke an authorization prospectively, subject to actions already taken in reliance on it.
3. Your medical privacy rights
Subject to the NPP and applicable law, you may have the right to:
- inspect or obtain a paper or electronic copy of eligible medical records;
- request an amendment to information you believe is incorrect or incomplete;
- receive an accounting of certain disclosures;
- request restrictions on certain uses or disclosures;
- request confidential communications by a reasonable alternative method or location;
- receive notice following a breach of unsecured PHI as required by law; and
- receive a paper copy of the NPP and file a complaint without retaliation.
4. Caliber’s role
Caliber provides non-clinical technology, administration, support, billing coordination, and program services. When Caliber handles PHI for a medical practice, Caliber uses and protects it as the practice’s business associate or service provider under applicable agreements and law. Caliber may also maintain non-PHI or consumer health data in its own capacity; that information is governed by the Caliber Privacy Policy and applicable law.
5. Requests and complaints
Use the MDI privacy center to request medical records or exercise PHI rights. You may also contact [email protected].
For questions about Caliber account or non-clinical data, contact: