Close this search box.
Close this search box.

HIPAA Privacy Practices Notice

Great Smokies Medical Center
Notice of Privacy Practices

Original Effective Date: March 6, 2003
Effective Date of this Revision: September 20, 2020

If you have questions re: this Notice, contact one of our Privacy Officers: Pat Gallimore or Anne Cortes:

Great Smokies Medical Center | 1312 Patton Ave | Asheville NC 28806 | Phone: (828) 252-9833 |

This Notice of Privacy Practices (Notice) describes how your medical information may be used and disclosed by Great Smokies Medical Center and how you can get access to this information. Please review it carefully.


We are committed to protecting the privacy of your personal health information. Protected Health Information (PHI) is information about you, including demographic information, that may identify you and that relates to your past, present or future physical or mental health conditions and related healthcare services.

This Notice describes how we may use your PHI within our practice or network and disclose (share outside of our practice or network) to carry out treatment, payment or healthcare operations. We may share your information for other purposes that are permitted or required by law. This Notice also describes your rights to access and control your PHI.

We are required by law to maintain the privacy and security of your PHI. We will follow the terms outlined in this Notice and make reasonable efforts to disclose the minimum PHI necessary.

We will notify you promptly if a breach occurs that may compromise the privacy or security of your information.

We may change our Notice at any time. Any changes will apply to all PHI. We will provide you with revised Notices by:


Uses and Disclosures of PHI

We may use or disclose (share) PHI to help provide healthcare services for you.

Your PHI may be used and disclosed by your physician, our office staff and other healthcare providers outside of our office who are involved in your care and treatment for the purpose of providing healthcare services to you.



PHI may be shared with the following:




We may use or disclose PHI, as needed, to conduct the business activities of this practice which are called healthcare operations.



We may use and disclose your PHI without your permission in the following situations:


Other uses and disclosures of your PHI:

We may use or disclose your PHI to a family member, close friend or person you approve as being involved in your healthcare in the following situations UNLESS you object:



The following uses and disclosures of PHI require your written authorization:


All other uses and disclosures not recorded in this Notice will require a written authorization from you or your personal representative. Written authorization is a method by which you can inform us how you want your information used and disclosed. Your written authorization may be revoked by you in writing at any time. PHI that has been disclosed prior to the receipt of the written authorization based on the direction provided in the prior Notice will not be subject to your written authorization.

Your Privacy Rights

You have certain rights related to your PHI.


You have the right to see and obtain a copy of your PHI.

This means you may inspect and obtain a copy of PHI about you that is contained in a designated record set for as long as we maintain the PHI. On request, we will provide you a copy of your records as soon as possible and no later than 30 working days following the request. There are some exceptions to the records which may be copied, and your request may be denied. We may charge you a reasonable cost-based fee for a copy of the records.


You have the right to request a restriction of your PHI.

You may request that this practice not use or disclose any part of your PHI for the purposes of treatment, payment or healthcare operations. We are not required to agree with these requests. If we agree to a restriction request, we will honor the restriction request unless the information is needed to provide emergency treatment.


There is one exception: we must accept your request in writing to restrict disclosure of PHI to a health insurance plan if you pay out of pocket in full for a service or product unless sharing that information is otherwise required by law.


You have the right to request that we communicate with you in different ways or at different locations.

You may also request that we use an alternative address or other method of contact such as mailing information to a post office box. We will not ask you for an explanation about the request. We will accommodate all reasonable requests.


You may have the right to request an amendment of your PHI.

If you feel that your PHI is not correct, you may request an amendment of your PHI on your medical record along with an explanation of the reason for the request. In certain cases, we may deny your request for an amendment at which time you will have an opportunity to disagree.


You have the right to a list of people or organizations who have received your health information from us.

This right applies to disclosures for purposes other than treatment, payment or healthcare operations. You have the right to obtain a listing of these disclosures that occurred after April 14, 2003 for up to six years prior to the date of your request. You may be charged a reasonable fee if you request more than one list within a 12-month period.


You have the right to choose someone to act on your behalf.

If you have given someone medical power of attorney over you or have or have a legal guardian, those persons can exercise your rights on your behalf and make choices about your health information. We will ask for proof of this relationship before we take any action.


Additional Privacy Rights



If you think we have violated your rights or you have a complaint about our privacy practices, you can contact one of our Privacy Officers listed above. You may file a complaint to the United States Department of Health and Human Services for Civil Rights by letter or phone call 1- (877) 696-6775 if you believe your privacy rights have been violated. We will not retaliate because you filed a complaint.