Welcome to the Agency for Health Care Administration's HIPAA Compliance Office. Our primary function is to advise and assist the Agency in its compliance efforts and to assist Medicaid recipients in exercising their rights as provided by HIPAA. This includes making sure that all AHCA employees safeguard the privacy of any Protected Health Information (PHI) in our custody.

HIPAA, AHCA and You
Our office is responsible for assisting Medicaid recipients in exercising their rights provided under HIPAA as these rights relate to their claims information. These rights are listed below. For a detailed description of your rights, as well as information on how Medicaid may use your Protected Health Information (PHI), please see The Medicaid and MediKids Notice of Privacy Practices.

The following forms are available to assist you with requesting your health information maintained by the agency and to excercise your rights provided by HIPAA.

• Request to Access Protected Health Information form (to request your or your child's health information)
• Request to Access Protected Health Information (Spanish) form (to request your or your child's health information)
• HIPAA Complaint Medical Release form (for attorneys representing Medicaid recipients needing to substantiate Medicaid’s lien relating to a tort or casualty accident/incident or Medicaid’s claim against the estate or against a trust account or annuity pursuant to Sections 409.010(l), 409.901, 409.910, 409.9101 and 733.2121(3)(d), Florida Statutes))
• Authorization for the Use and Disclosure of Protected Health Infomation form (to authorize someone else such as a family member to receive your health information)
• Authorization for the Use and Disclosure of Protected Health Infomation (Spanish) form (to authorize someone else such as a family member to receive your health information)
• Request for an Accounting of Disclosures of Protected Health Information form (to determine who the agency has shared your health information with for purposes other than treatment payment or health care operations)
• Request for a Restriction on Protected Health Information form (to restrict with whom the agency may share your health information)
• Request to Receive Confidential Communications at an Alternative Location form (to request the agency send your health information to a location other than your primary residence)

HIPAA Questions and Complaints
Our Agency, including our Medicaid Area Offices, does not have the authority to advise non-AHCA personnel on any HIPAA related issues. All such questions should be directed to the Office for Civil Rights HIPAA Website: http://www.hhs.gov/ocr/hipaa/ , or contact them at 1-866-627-7748. Included on this site are the Privacy Rule, Frequently Asked Questions and directions on how to file a HIPAA complaint.

The following is a list of commonly asked questions that should be directed to the Office for Civil Rights:

• What is HIPAA, and what are my rights?
• How do I file a HIPAA complaint against my health care provider?
• What do I do if my doctor will not give me my medical records?
• If I am a health care provider, how do I comply with HIPAA?

Please Note: If you feel that an AHCA employee has violated HIPAA, in addition to contacting the Office for Civil Rights, please notify AHCA's HIPAA Compliance Office at 850-488-3849.

Non-HIPAA Questions and Complaints
Please review the following information for all questions and requests that are not covered in the preceding sections.

• If you wish to file a general complaint against a health care provider or facility please contact the AHCA Consumer Hotline at 1-888-419-3456.
• To make a public records request, including facility complaint files, please contact the Public Records Coordinator (see Contact Information below).
• For all other concerns or questions that do not relate to HIPAA please contact your local area Medicaid office.

Contact Information

HIPAA Privacy and Security Compliance Office
Agency for Health Care Administration
2727 Mahan Drive, Mail Stop #5
Tallahassee, FL 32308-5403
Phone: (850) 488-3849
Fax: (850) 414-6837
Email:  hipaaco@ahca.myflorida.com

Office for Civil Rights
U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Room 509F, HHH Building
Washington, D.C. 20201
HIPAA toll-free number at (866) 627-7748

For questions about HIPAA, please call OCR’s toll-free number at (866) 627-7748
To file a HIPAA complaint with OCR, please call OCR’s toll-free number at (800) 368-1019
For the hearing impaired, please contact toll-free TDD line: (800) 537-7697

http://www.hhs.gov/ocr/hipaa/

Public Records Coordinator
Agency for Health Care Administration
2727 Mahan Drive, Mail Stop #2
Tallahassee, FL 32308-5403
(850) 414-6044, Message Line
(850) 921-9041, Fax Line