Maine Department of Health and Human Services
Office of Aging and Disability Services
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.
PLEASE REVIEW IT CAREFULLY.
At the Maine Department of Health and Human (DHHS), not all of our work involves personal information. When it does, we are required to protect it. Our facilities or offices that provide you with health care services or pay for your care are required to provide you with a Notice of Privacy Practices to tell you about your rights, our legal duties, and how those offices are permitted to use and share your protected health information. We give a small number of examples to explain what we mean, but not every use or disclosure can be listed on this Notice. Please let us know if you have any questions about this form.
How We May Use and Disclose Protected Health Information:
For Treatment: When you receive healthcare services from our hospitals or providers, we will use and disclose your information to take care of you, and to coordinate or manage your healthcare services in our offices or with a third party. For example, we may share your information with a laboratory or imaging center, with a specialist who needs information to properly treat you, or with a home health agency that provides care to you. We may share information with people involved in your care unless you object.
For Payment: When we provide treatment, we will use your information to get paid for services we provide you, and to obtain pre-approval for treatment, where necessary.
If you are receiving this Notice as a member of MaineCare, we will use your information and may communicate with your health care providers for reasons such as: to see if you are eligible for services or benefits; to help coordinate your care; to review your use of services; and to tell you about program changes and updates.
For Our Healthcare or Business Operations: We may use or share your information to review the care we provided you, for education and training, or for legal, accounting or payment matters. We may share information with others who help us do our work and who promise to follow the law and keep your information confidential, including those who help us process MaineCare claims or provide us with business reports we need. We may use a sign-in sheet at the registration desk so that we may call you by name when we are ready to see you, and we may contact you to remind you of your appointment.
Substance Use Disorder Records: If we have received your records from a substance use disorder (drug or alcohol treatment) provider or program, we will only release those records with your written permission unless a legal exception, such as a medical emergency or court order, applies.
We are not permitted to disclose your substance use disorder records for civil, criminal, administrative, or legislative proceedings again unless you provide us with your written consent or a court orders us to share the information after you have received notice and the opportunity for a legal hearing.
If you are a patient of Dorothea Dix Psychiatric Center or Riverview Psychiatric Center, we will ask for your written permission to share information to treat you and be paid, unless you need emergency care.
HealthInfoNet: Maine has a statewide health information exchange called HealthInfoNet, which may receive certain limited health information from MaineCare. If your information is included, you have the right to “opt out” if you choose. Mental health and HIV treatment data will never be included unless you ask to “opt in.” Substance use disorder records are never included. More details are available from your provider or program.
The law says that we may use or share your information in certain situations, including:
| When required by state or federal law; | To report abuse or neglect; |
|---|---|
| In an emergency or for disaster relief purposes, such as to notify family about your whereabouts and condition; | To persons authorized by law to act on your behalf, such as a guardian, health care power of attorney or surrogate; |
| For public health and safety activities, such as to help prevent the spread of disease; | To comply with Food and Drug Administration requirements, such as to help with a product recall: |
| For health oversight purposes, such as reporting to the Center for Medicare and Medicaid Services or for licensing audits, investigations or inspections; | Where required by U.S. Department of Health and Human Services to see if we are complying with federal privacy law; |
| In connection with Workers’ Compensation claims for benefits: | To assist medical examiners or funeral directors in carrying out their duties; |
| For research where your information has been de-identified or we have received permission from a special research review board; | To comply with a valid court order, subpoena or other appropriate administrative, judicial or legal request; |
| We may share your information with appropriate military entities if you are a member or veteran of the armed forces. We may be required to disclose information for national security or intelligence purposes. If you are an inmate, we may release your information for your health or safety in the correctional facility. | To assist law enforcement where there was a possible crime on the premises. We may also share your information where necessary to prevent or lessen a serious or imminent threat to you or another person. |
| If you are a member or veteran of the armed forces, we may share your information with the appropriate arm of the military upon request. If you are an inmate, we may release your information for your health or safety in the correctional facility. | For valid national security or intelligence purposes, or to assist law enforcement where there was a possible crime on the premises. We may also share your information where necessary to prevent or lessen a serious or imminent threat to you or another person. |
Other uses and disclosures will be made with your written authorization. If you sign an authorization (release) form, you may revoke it (take back your permission) at any time, except to the extent that we have already shared your information based upon your permission.
Information shared with your permission or by law could be redisclosed by the individual or organization receiving it and no longer protected by federal confidentiality laws.
Your Rights: The following is a statement of your rights with respect to your protected health information:
You have the right to see, review and copy your information. You must ask us in writing and agree to be responsible for a reasonable fee before we provide you with a copy of your medical and/or billing record. There is no cost to look at your information, but any review will be supervised by our staff.
You may ask us to provide your electronic record in electronic format. If we are unable to provide you with the information in the manner you request, we will provide it in a form that works for you and our office. You may also ask us to send your information to a specific person or place via email if a) you provide the email address in writing and b) sign a statement that you fully understand that email comes with risks that we cannot prevent and for which our offices are not responsible.
Under certain circumstances, your provider may not allow you to see certain parts of your record. You may ask that this decision be reviewed by another licensed professional.
You have the right to ask us to contact you in a way and in a place that you believe will keep your information private, for example, to contact you at a different address or telephone number.
You have the right to request a restriction of your information. This means you may ask us not to use or share all or part of your information for purposes such as treatment, payment or healthcare operations. We will consider your request carefully, and may honor reasonable requests where possible. We are not required to honor all requests except if you have paid out-of-pocket in full for health care services and are asking that the Department not share records with your health insurer.
You have the right to pay out of pocket for your services and ask us not to share your information with your health insurer, as long as sharing your claim is not required by law. Please discuss this request with us.
You may also ask that any part of your information not be shared with family members or friends who may be involved in your care. Please tell us the specific restriction you want and to whom you want the restriction to apply.
You have the right to receive an accounting of disclosures. This essentially means you may receive a list of when and to whom we have shared your information for up to 6 years from the date of your request. The list will not include times we used your information to treat you, get paid or pay for services; to conduct our business operations; or where you received a copy of, or gave permission for, sharing your information.
You may ask us to amend your record. While we will not erase information in your file, we will add your written statement to your information to correct or clarify the record. Your provider may submit a response to the new correction, which will be provided to you.
Breach Notification. We are required to have safeguards in place that protect your information. In the event there is a breach of those protections, we will notify you, government officials, and others, as the law requires.
Complaints. You may make a complaint to the Privacy/Security Liaison assigned to the DHHS facility or office where you received services by calling (800) 262-2232 or emailing dhhs.privacy@maine.gov.
You may contact the United States Department of Health and Human Services, Office of Civil Rights (OCR) to make a complaint if you believe we have violated your HIPAA privacy rights. You may contact the OCR electronically at: http://www.hhs.gov/ocr/privacy/hipaa/complaints/index.html or write to:
You have a right to receive a paper copy of this Notice of Privacy Practices upon request, even if you have received this Notice electronically.
We reserve the right to change the terms of this Notice, but will comply with the Notice that is in effect. We will post the current notice on our website and in our facilities and provide you with the newest notice as the law requires. This updated notice is effective as of February 16, 2026.