Privacy statement

Craig General Hospital notice of privacy practices

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

We understand the importance of privacy and are committed to maintaining the confidentiality of your medical information. We make a record of the medical care we provide and may receive such records from others. We use these records to provide quality medical care or to enable other health care providers to provide quality medical care; to obtain payment for services provided; and for administrative and operational purposes. The medical record is the property of Craig General Hospital. If you have any questions about this notice, please contact Charlene Birky, Privacy Officer for Craig General Hospital, at 918.256.7551, extension 164.

How Craig General Hospital may use or disclose your medical information

For treatment: We use medical information about you to provide your medical care. We disclose medical information to our employees and others who are involved in providing the care you need. For example, we may share your medical information with other physicians or other healthcare providers who will provide services which we do not provide. We may share your medical information with a pharmacist who needs it to dispense a prescription to you or a laboratory that performs a test. We may also disclose medical information to members of your family or others who can help you when you are sick or injured.

For payment: We use and disclose medical information about you to obtain payment for the services you received. For example, a bill may be sent to you and/or to a third party payor, such as an insurance company or health plan.

For health care operations: We may use and disclose medical information about you to operate Craig General Hospital. For example, we may use and disclose this information to review and improve the quality of care we provide, or the competence and qualifications of our professional staff. We may use and disclose medical information about you to get your health plan to authorize services or referrals. We may also share your medical information with our business associates, such as a billing service, that perform administrative services for us. We have a written contract with each business associate that contains terms requiring them to protect the confidentiality of your medical information.

Appointment reminders: We may use and disclose medical information to contact and remind you about appointments. We will phone your home or contact number.   If you are not home, we may leave this information on your answering machine or voice mail or in a message left with the person answering the phone.

Sign-in sheet: We may use and disclose medical information about you by having you sign in when you arrive in our registration areas. We may also call out your name when we are ready to see you.

Notification and communication with family: We may disclose your medical information to notify or assist in notifying a family member, your personal representative, or another person responsible for your care about your location, your general condition, or in the event of your death. In the event of a disaster, we may disclose information to a relief organization so that they may coordinate these notification efforts. We may also disclose information to someone who is involved with your care. If you are able and available to agree or object, we will give you the opportunity to object prior to making these disclosures, although we may disclose medical information in a disaster even over your objection if we believe it is necessary to respond to the emergency circumstances. If you are unable and unavailable to agree or object, our health professionals will use their best judgment in communication with your family and others.

Personal use: We will release records to a patient/patient’s legal representative for personal use (i.e. to keep in personal file, to take to another physician, to take to an attorney, etc.) per patient/patient’s legal representative’s request only with authorization (a signed release) by the patient/patient’s legal representative. The patient and/or the patient’s legal representative has the right to revoke the authorization at any time.

Directory: We may include certain limited information about you in the hospital directory while you are a patient at the hospital. This information may include your name, location in the hospital, and your general condition (e.g. fair, stable, etc.) which may be released to people who ask for you by name. Your religious affiliation may be given to a member of the clergy, such as a  minister, priest, or rabbi, even if they don’t ask for you by name. This is so your family, friends, and clergy can visit you in the hospital and generally know how you are doing. 

Required by law: We may use and disclose medical information about you as required by law. For example, we may disclose information in the course of certain events or for the following purposes:

  • To report information related to victims of abuse, neglect or domestic violence;
  • To assist law enforcement officials in their law enforcement duties;
  • To respond to judicial and administrative proceedings, or in the course of judicial proceedings, if you have waived your rights to confidentiality under Oklahoma law; and
  • To help health oversight agencies during the course of audits, investigations, inspections, licensure, and other proceedings, subject to the limitations imposed by federal and Oklahoma law.

Lawsuits and disputes: If you are involved in a lawsuit or a dispute, we may disclose medical information about you in response to a court or administrative order. If the lawsuit is a medical negligence action, your medical information may be disclosed without a court order or subpoena. We may also disclose medical information about you in response to a subpoena, discovery request, or other lawsuit process by someone else involved in the dispute, but only if efforts have been made to tell you about the request or to obtain an order protecting the information requested.

Public health and safety: Your medical information may be used or disclosed for public health activities such as assisting public health authorities or other legal authorities prevent or control disease, injury, or disability, or for other health oversight activities. Your medical information may be disclosed to appropriate persons in order to prevent or lessen a serious and imminent threat to the health and safety of a particular person or the general public.

Specialized government functions: We may disclose your medical information for military or national security purposes or to correctional institutions or law enforcement officers that have you in their lawful custody.

Coroners and/or funeral directors: We may disclose your medical information to coroners in connection with their investigations of death or to funeral directors to enable them to carry out their lawful duties.

Organ or tissue donations: We may disclose your medical information to organizations involved in procuring, banking, or transplanting organs and tissues.

Worker's compensation: Your medical information may be used or disclosed as necessary in order to comply with laws and regulations related to workers’ compensation.

Change of ownership: In the event that Craig General Hospital is sold or merged with another organization, your medical information will become the property of the new owner, although you will maintain the right to request that copies of your medical information be transferred to a physician at another healthcare facility.

Marketing: We may contact you to give you information about products or services related to your treatment, case management or care coordination, or to direct or recommend other treatments or health-related benefits and services that may be of interest to you. We may also encourage you to purchase a product or service when we see you. We will not use or disclose your medical information for marketing purposes without your written authorization. For example, support groups related to your treatment may be encouraged.

Research: We may use your health information for research purposes when an institutional review board or privacy board has reviewed the research proposal and established protocols to ensure the privacy of your health information and has approved the research.

By Oklahoma law we are required to notify you:
that your medical information used or disclosed as described in this Privacy Notice may include records which may indicate the presence of a communicable or venereal disease which may include, but are not limited to, diseases such as hepatitis, syphilis, gonorrhea and the human immunodeficiency virus, also known as Acquired Immune Deficiency Syndrome (AIDS).

When Craig General Hospital may not use or disclose your medical information

Except as described in this Notice of Privacy Practices, Craig General Hospital will not use or disclose medical information which identifies you without your written authorization. If you do authorize Craig General Hospital to use or disclose your medical information for another purpose, you may revoke your authorization in writing at any time.

Your medical information rights

You have the right:

  • To a paper copy of this Notice of Privacy Practices.
  • To request restrictions on certain uses and disclosures of your medical information by written request specifying what information you want to limit and what limitations on our use or disclosure of that information you wish to have imposed. We reserve the right to accept or reject your request and will notify you of our decisions.
  • To request that you receive medical information in a specific way or at a specific location. For example, you may ask that we send information to your work address. We will comply with all reasonable requests submitted.
  • To obtain access to or a copy of your medical information, with limited exceptions. A reasonable fee may be charged for making copies. Under current Oklahoma law, fees of $1.00 for the first page and .50 cents per page thereafter and $5.00 per film are allowed. We may also charge for postage if the copies are to be mailed. If we deny your request for access or copies, you will be informed of your rights to appeal our decision.
  • To request that we amend your medical information that you believe is incorrect or incomplete. Your request to amend must be in writing and include the reasons you believe the information is inaccurate or incomplete. We are not required to change your medical information and will provide you with information about Craig General Hospital's denial and how you can disagree with the denial. You also have the right to request that we add to your record a statement of up to two hundred and fifty (250) words concerning any statement or item you believe to be incomplete and incorrect.
  • To receive an accounting of disclosures made of your medical information by Craig General Hospital unless the disclosures were for purposes of treatment, payment, health care operations, certain government functions, or pursuant to your written authorization. You have the right to revoke your authorization to use or disclose medical information except to the extent that this use or disclosure has already occurred.

If you would like to have a more detailed explanation of these rights, or if you would like to exercise one or more of these rights, contact our privacy officer listed at the beginning of this notice.

Obligations of Craig General Hospital

We are required: to maintain the privacy of your confidential medical information, to provide you with this notice of our legal duties and privacy practices with respect to your medical information, to notify affected individuals following a breach of unsecured PHI, to abide by the terms of this notice, to notify you if we are unable to agree with a requested restriction on how your information is used or disclosed, to accommodate reasonable requests you make to communicate medical information by alternative means or alternative locations, and to obtain your written authorization to use or disclose your medical information for reasons other than those listed above and permitted under law. We reserve the right to change or amend this Notice of Privacy Practices at any time in the future. After an amendment is made, the revised Notice of Privacy Practices will apply to all medical information that we maintain. A copy of any revised Notice of Privacy Practices will be made available to you upon your next visit.


Complaints about this Notice of Privacy Practices or how Craig General Hospital handles your medical information should be directed to:

Charlene Birky or her designee
735 N. Foreman
Vinita, Oklahoma 74301
918.256.7551, ext.164

If you are not satisfied with the manner in which this office handles a complaint, you may submit a formal complaint to:

The Department of Health and Human Services
Office of Civil Rights
Herbert H. Humphrey Building, Room 509 F
200 Independence Ave S.W.
Washington, D.C. 20201

You will not be penalized for filing a complaint.

This Notice is effective: September 23, 2013

Back to top.