NOTICE OF PRIVACY PRACTICES
HARDIN COUNTY GENERAL HOSPITAL
d/b/a HARDIN MEDICAL CENTER
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, HOW YOU CAN GET ACCESS TO THIS INFORMATION, AND YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION. PLEASE REVIEW IT CAREFULLY.
Effective Date: February 10, 2003
Revised: July 15, 2026
If you have questions about this Notice, please contact:
Brittany Bennett, Compliance Officer
Hardin County General Hospital d/b/a Hardin Medical Center
935 Wayne Road
Savannah, TN 38372
Phone: 731-926-8120
Email: bbennett@hardinmedical.com
When this Notice uses the terms “Hardin Medical Center,” “HMC,” “hospital,” “facility,” “we,” “our,” or “us,” it refers to Hardin County General Hospital d/b/a Hardin Medical Center and its related services and operations.
OUR RESPONSIBILITIES
Hardin Medical Center is required by law to maintain the privacy and security of your protected health information, also called “PHI.” Protected health information includes information that identifies you and relates to your past, present, or future physical or mental health or condition, the health care services you receive, or payment for your health care.
We are required to provide you with this Notice of Privacy Practices and to follow the duties and privacy practices described in this Notice. We are also required to notify you if a breach occurs that may have compromised the privacy or security of your unsecured protected health information.
We will not use or disclose your health information other than as described in this Notice unless you authorize us in writing. You may revoke your authorization in writing at any time, except to the extent that we have already relied on your authorization.
We may change the terms of this Notice at any time. Any revised Notice will apply to all protected health information we maintain. If we make a material change to this Notice, we will make the revised Notice available upon request, post it in our facility, and post it on our website if applicable. A copy may also be provided to you at the time of registration or upon request.
HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
The following sections describe the ways we may use and disclose your protected health information. Not every possible use or disclosure is listed, but all uses and disclosures will fall within one of these categories or otherwise be permitted or required by law.
Treatment
We may use and disclose your health information to provide, coordinate, or manage your health care and related services. This may include sharing information with physicians, nurses, technicians, students, other hospital personnel, outside providers, pharmacies, laboratories, imaging centers, home health agencies, nursing facilities, or others involved in your care.
For example, we may share information with a physician to whom you have been referred so that the physician has the information needed to diagnose or treat you.
Payment
We may use and disclose your health information so that we may bill and receive payment for the health care services we provide. This may include disclosures to your health plan, Medicare, Medicaid, or other payors to determine eligibility, obtain prior authorization, review medical necessity, process claims, or conduct utilization review.
For example, we may disclose information to your insurance company to obtain approval for a hospital stay, test, procedure, or other service.
Health Care Operations
We may use and disclose your health information for our health care operations. These activities help us operate Hardin Medical Center, improve care, evaluate performance, train staff, comply with legal and regulatory requirements, and manage business activities.
Examples may include quality assessment, case management, patient safety activities, employee review, medical staff credentialing, student training, licensing, accreditation, auditing, compliance activities, business planning, and general administrative activities
Business Associates
We may share your health information with third parties called business associates who perform services on our behalf. These may include billing companies, consultants, attorneys, auditors, technology vendors, transcription companies, or other contractors. When we share information with a business associate, we require a written agreement that protects the privacy and security of your information.
Appointment Reminders and Health-Related Services
We may use and disclose your health information to contact you about appointments, test results, follow-up care, treatment alternatives, health-related benefits, services, or programs that may be of interest to you.
Facility Directory
Unless you object, we may include certain limited information about you in our facility directory while you are a patient. This information may include your name, your location in the facility, your general condition, and your religious affiliation. Directory information, except for religious affiliation, may be released to people who ask for you by name. Your religious affiliation may be shared with clergy members even if they do not ask for you by name.
You have the right to object to being included in the facility directory.
Individuals Involved in Your Care or Payment for Your Care
Unless you object, we may disclose health information to a family member, relative, close friend, personal representative, or another person you identify who is involved in your care or payment for your care. We may also disclose information to notify or assist in notifying such persons of your location, general condition, or death.
If you are unable to agree or object, we may use our professional judgment to determine whether the disclosure is in your best interest.
Disaster Relief
We may disclose your health information to an authorized public or private entity assisting in disaster relief efforts so that your family or others responsible for your care can be notified of your location, condition, or death.
Fundraising
We may contact you for fundraising purposes. You have the right to opt out of receiving fundraising communications from Hardin Medical Center. If you choose to opt out, we will honor your request.
USES AND DISCLOSURES THAT MAY BE MADE WITHOUT YOUR AUTHORIZATION
Required by Law
We may use or disclose your health information when required to do so by federal, state, or local law. The use or disclosure will be limited to the requirements of the law.
Public Health Activities
We may disclose your health information for public health activities, such as preventing or controlling disease, injury, or disability; reporting births and deaths; reporting child abuse or neglect; reporting adverse events or product defects; notifying persons of recalls; and reporting communicable diseases as authorized by law.
Health Oversight Activities
We may disclose health information to health oversight agencies for activities authorized by law. These activities may include audits, investigations, inspections, licensure, certification, disciplinary actions, civil rights compliance, and other government oversight activities.
Abuse, Neglect, or Domestic Violence
We may disclose health information to an appropriate government authority if we reasonably believe you are a victim of abuse, neglect, or domestic violence, or as otherwise required or authorized by law.
Food and Drug Administration
We may disclose health information to persons or organizations subject to the jurisdiction of the Food and Drug Administration for purposes such as reporting adverse events, product defects, biologic product deviations, product tracking, product recalls, repairs, replacements, or post-marketing surveillance.
Legal Proceedings
We may disclose health information in response to a court or administrative order, subpoena, discovery request, or other lawful process, as permitted or required by law.
Law Enforcement
We may disclose health information for law enforcement purposes when permitted or required by law. This may include responding to a court order, warrant, subpoena, or summons; identifying or locating a suspect, fugitive, material witness, or missing person; reporting certain injuries or deaths; reporting crimes on our premises; or responding to certain medical emergencies.
Coroners, Medical Examiners, Funeral Directors, and Organ Donation
We may disclose health information to coroners, medical examiners, and funeral directors as necessary for them to carry out their duties. We may also use or disclose health information for organ, eye, or tissue donation purposes.
To Prevent a Serious Threat to Health or Safety
We may use or disclose health information when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public, consistent with applicable law.
Military, Veterans, National Security, and Protective Services
If you are a member of the Armed Forces, we may disclose health information as required by military command authorities. We may also disclose health information for national security, intelligence, counterintelligence, protective services, or other specialized government functions as authorized by law.
Workers’ Compensation
We may disclose health information as authorized by and to the extent necessary to comply with workers’ compensation laws or other similar programs.
Correctional Institutions and Law Enforcement Custody
If you are an inmate of a correctional institution or under the custody of law enforcement, we may disclose health information to the correctional institution or law enforcement official when necessary for your health and safety, the health and safety of others, or the safety and security of the correctional institution.
Research
We may use or disclose your health information for research purposes when approved through a special review process or as otherwise permitted by law.
De-Identified Information and Limited Data Sets
We may use or disclose health information that has been de-identified, meaning information that does not identify you and cannot reasonably be used to identify you. We may also use or disclose limited data sets for research, public health, or health care operations as permitted by law.
SPECIAL PROTECTIONS FOR CERTAIN HEALTH INFORMATION
Certain types of health information may have additional protections under federal or state law. When these protections apply, Hardin Medical Center will follow the stricter legal requirements.
Substance Use Disorder / Medical Stabilization Records
Hardin Medical Center operates a medical stabilization program. Records related to substance use disorder diagnosis, treatment, referral, withdrawal management, detoxification, or recovery services may be protected by federal confidentiality laws, including 42 CFR Part 2, in addition to HIPAA.
If we maintain substance use disorder patient records protected by 42 CFR Part 2, we generally may not use or disclose those records without your written consent unless the use or disclosure is otherwise permitted or required by law. These records may not be used or disclosed in a civil, criminal, administrative, or legislative investigation or proceeding against you without your written consent or a qualifying court order.
If a breach of substance use disorder patient records occurs, Hardin Medical Center will provide notification as required by law.
Reproductive Health Care Information
We will follow applicable federal and state privacy laws regarding reproductive health care information. When required by law, we will not use or disclose protected health information for a prohibited purpose related to investigating or imposing liability on any person for seeking, obtaining, providing, or facilitating lawful reproductive health care.
When we receive certain requests for protected health information potentially related to reproductive health care, we may be required to obtain a signed attestation that the requested information will not be used for a prohibited purpose before disclosing the information.
Psychotherapy Notes
Most uses and disclosures of psychotherapy notes require your written authorization, unless an exception applies under law.
Genetic Information
We will not use or disclose genetic information for underwriting purposes as prohibited by law.
USES AND DISCLOSURES THAT REQUIRE YOUR WRITTEN AUTHORIZATION
We must obtain your written authorization for most uses and disclosures of psychotherapy notes, most uses and disclosures of health information for marketing purposes, and disclosures that constitute a sale of protected health information.
Other uses and disclosures not described in this Notice will be made only with your written authorization unless otherwise permitted or required by law.
You may revoke your authorization in writing at any time. If you revoke your authorization, we will stop using or disclosing your health information for the purposes covered by the authorization, except to the extent we have already acted in reliance on it.
YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
You have the following rights regarding your protected health information.
Right to Inspect and Obtain a Copy
You have the right to inspect and obtain a copy of health information about you that is maintained in a designated record set for as long as we maintain the information. A designated record set generally includes medical records, billing records, and other records we use to make decisions about you.
You may request a paper or electronic copy of your medical record. We will provide a copy or a summary of your health information, usually within 30 days of your request, unless an extension is permitted by law. We may charge a reasonable, cost-based fee.
In certain limited circumstances, we may deny your request. If your request is denied, you may have the right to have the denial reviewed.
Right to Request an Amendment
If you believe health information we have about you is incorrect or incomplete, you may ask us to amend the information. Your request must be made in writing and should explain why the amendment is needed.
We may deny your request in certain circumstances, such as when the information was not created by us, is not part of the records maintained by us, is not available for inspection, or is accurate and complete. If we deny your request, you have the right to submit a written statement of disagreement.
Right to an Accounting of Disclosures
You have the right to request a list, or accounting, of certain disclosures we have made of your health information. This list will not include all disclosures, such as disclosures made for treatment, payment, and health care operations; disclosures made to you; disclosures made based on your authorization; disclosures made for facility directory purposes; disclosures made to persons involved in your care; and certain other disclosures excluded by law.
Your request must state a time period, which may not be longer than six years prior to the date of your request.
Right to Request Restrictions
You have the right to request restrictions on certain uses or disclosures of your health information for treatment, payment, or health care operations. You may also request that we limit disclosures to family members, friends, or others involved in your care or payment for your care.
We are not required to agree to most requested restrictions. If we agree, we will comply with your request unless the information is needed to provide emergency treatment or unless another exception applies.
We are required to agree to your request to restrict disclosure of information to your health plan if the disclosure is for payment or health care operations, is not otherwise required by law, and the information relates solely to a health care item or service for which you, or someone on your behalf other than the health plan, have paid in full.
Right to Request Confidential Communications
You have the right to request that we communicate with you in a certain way or at a certain location. For example, you may ask that we contact you only at a specific phone number or mailing address.
We will accommodate reasonable requests. We will not ask you to explain the reason for your request, but we may ask for information about how payment will be handled or how to contact you.
Right to Choose Someone to Act for You
If you have given someone medical power of attorney or if someone is your legal guardian or personal representative, that person may exercise your rights and make choices about your health information. We may require proof of the person's authority before taking action.
Right to a Paper Copy of This Notice
You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive the Notice electronically.
Right to Receive Notice of a Breach
You have the right to be notified if we discover a breach of your unsecured protected health information, unless a risk assessment demonstrates that there is a low probability that the information has been compromised. Notification will be provided without unreasonable delay and no later than 60 days after discovery of the breach, as required by law.
YOUR CHOICES
For certain health information, you may tell us your choices about what we share. If you have a clear preference for how we share your information in the situations described below, please tell us.
You have both the right and choice to tell us whether to:
Share information with your family, close friends, or others involved in your care;
Share information in a disaster relief situation;
Include your information in the facility directory; or
Contact you for fundraising efforts.
If you are unable to tell us your preference, such as if you are unconscious, we may share information if we believe it is in your best interest. We may also share information when needed to lessen a serious and imminent threat to health or safety.
COMPLAINTS
You may file a complaint if you believe your privacy rights have been violated.
You may file a complaint with Hardin Medical Center by contacting:
Brittany Bennett, Compliance Officer / Privacy Contact
Hardin Medical Center
935 Wayne Road
Savannah, TN 38372
Phone: 731-926-8120
Email: bbennett@hardinmedical.com
You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services, Office for Civil Rights.
Hardin Medical Center will not retaliate against you for filing a complaint.
ACKNOWLEDGMENT OF RECEIPT
Hardin Medical Center may ask you to sign an acknowledgment that you received this Notice. Your signature only confirms that you received the Notice; it does not waive any of your rights.
PUBLIC NOTICE
Hardin Medical Center is accredited by DNV Healthcare. If you have a complaint regarding the care provided by the hospital, please report this to the hospital to allow management opportunity to seek resolution. If the issue cannot be resolved by the hospital, complaints may be submitted to DNV using the online complaint form: http://dnvglhealthcare.com/patient-complaint-report
Complaints may also be submitted by e-mail; hospitalcomplaint@dnvgl.com, phone 866-496-9647, fax 513-947-1250, or postal mail:
ATTN: Hospital Complaint
DNV GL – Healthcare
400 Techne Center Drive, Suite 100
Milford, OH 45150
If these concerns are still not being addressed to your satisfaction then you may choose to contact the Department of Health at 877.287.0010, www.tn.gov or send via regular mail to: Division of Healthcare Facilities Centralized Complaint Intake Unit 227 French Landing, Suite 501 Heritage Place Metrocenter, Nashville, TN 37243