Maryland Children Health Center (MCHC)

Effective Date: November 2025

Maryland Children Health Center is committed to safeguarding the privacy and security of your child’s health information. This Privacy Policy explains how we collect, use, disclose, and protect information when you receive care from us or use our website, patient portal, or related services.

This notice applies to all services provided by MCHC, including: Well Child Visits, Sick Visits, Asthma Treatment, ADHD Screenings, and Immunizations.

 

1. Our Legal Duty to Protect Health Information

We are required by federal and Maryland law to:

  • Maintain the privacy of Protected Health Information (PHI).
  • Provide you with this Notice describing our legal duties and privacy practices.
  • Follow the terms of this Notice currently in effect.
  • Notify you if a breach occurs that may compromise the privacy or security of PHI.

“PHI” includes information that identifies your child and relates to their health status, care, or payment for care.

 

2. How We Use and Share Your Child’s PHI (Without Special Permission)

HIPAA allows us to use or disclose PHI for the following purposes:

A) Treatment

We may share PHI with doctors, nurses, specialists, hospitals, pharmacies, labs, and other providers involved in your child’s care.
Example: sending immunization records to a school-requested provider or coordinating asthma care with a pediatric pulmonologist.

B) Payment

We may use or share PHI with insurance plans or Medicaid to bill and collect payment for services.
Example: submitting claims for sick visits or ADHD screening evaluations.

C) Health Care Operations

We may use PHI to operate our practice safely and efficiently.
Examples include: quality improvement, staff training, care coordination, accreditation, legal compliance, and auditing.

These are standard HIPAA “treatment, payment, and operations” uses.

 

3. Other Permitted Disclosures

We may disclose PHI in certain additional situations allowed or required by law, including:

  • Public health and safety (e.g., reporting certain infectious diseases or vaccine data to state registries).
  • Abuse, neglect, or domestic violence reporting as required by law.
  • Health oversight activities (e.g., audits, investigations, licensing inquiries).
  • Legal proceedings (court orders, subpoenas, or other lawful requests).
  • Law enforcement in limited circumstances.
  • Coroners/medical examiners when required.
  • To prevent a serious threat to health or safety.

We only disclose the minimum necessary information for these purposes.

 

4. Uses and Disclosures Requiring Your Written Authorization

We will ask for your written permission (authorization) before using or sharing PHI for:

  • Marketing not related to your child’s care.
  • Sharing information with third parties that are not involved in care, payment, or operations.
  • Any purpose not described in this Notice.

You may revoke an authorization at any time in writing, except where we already relied on it.

 

5. Special Rules for Children and Parents/Guardians

Because we serve minors, we follow both HIPAA and Maryland law on parental access and minor confidentiality.

  • Generally, parents/legal guardians may access their child’s medical records.
  • Maryland law also protects certain sensitive services a minor may consent to on their own; in those cases, access may be limited as required by law.
  • If parents are separated or divorced, a non-custodial parent typically still has rights to access the child’s medical information unless a court order says otherwise.

If you have custody documents or special restrictions, please provide them so we can apply them correctly.

 

6. Your Rights Regarding PHI

You (or your child’s legal representative) have the right to:

  1. Inspect and get copies of your child’s medical records.
  2. Request electronic copies and ask us to send them to a third party, consistent with HIPAA and the 21st Century Cures Act right of access.
  3. Request corrections or amendments if you believe a record is inaccurate.
  4. Receive an accounting of disclosures (a list of certain disclosures made outside of treatment/payment/operations).
  5. Request restrictions on certain uses/disclosures (we are not always required to agree).
  6. Request confidential communications (e.g., sending reminders to a different number or address).
  7. Obtain a paper copy of this Notice at any time.

To exercise any of these rights, contact us using the information in Section 14.

 

7. Information Blocking & Timely Access

MCHC supports your right to timely access to electronic health information. We do not engage in practices that unlawfully delay, block, or discourage access to records, except where a legally recognized exception applies (for example, to prevent harm or protect privacy).

 

8. How We Protect PHI

We use administrative, physical, and technical safeguards to protect PHI, including:

  • Secure electronic health record (EHR) systems.
  • Access controls and staff role-based permissions.
  • Encryption where appropriate.
  • Secure messaging through our patient portal.
  • Staff privacy and security training.
  • Routine risk reviews and compliance monitoring.

 

9. Breach Notification

If unsecured PHI is breached, we will notify affected patients/guardians without unreasonable delay, and as required by HIPAA and Maryland law.

Notification may include what happened, what information was involved, steps we are taking, and how you can protect yourself.

 

10. Website, Patient Portal, and Online Data

A) Website Use

When you visit our website, we may collect limited information such as device type, IP address, pages visited, and cookies for basic site functionality and security.

We do not sell personal information.

B) Patient Portal

Our portal allows you to view medical records, test results, visit summaries, and immunization history. Portal messages are part of your child’s medical record.

C) Maryland Online Data Privacy Act (MODPA)

Maryland’s consumer privacy law includes heightened protections for consumer health data. We follow MODPA principles such as data minimization, purpose limitation, and honoring consumer rights where applicable.

Note: Most clinical information is regulated under HIPAA. When MODPA applies (for example, to certain website or marketing data not covered by HIPAA), we comply with its requirements.

 

11. Cookies and Analytics

We may use cookies and similar tools to:

  • Keep the website working properly.
  • Improve performance and user experience.
  • Protect against fraud or abuse.

You can adjust cookie settings in your browser. Disabling cookies may limit website functionality.

 

12. How Long We Keep Records

We retain medical records in accordance with Maryland law and professional standards. Maryland generally requires retention of medical records for at least seven years, with longer retention for minors and certain clinical situations.

 

13. Changes to This Notice

We may update this Notice as laws, technology, or our practices change. Updated versions will be available:

  • On our website, and/or
  • At our front desk upon request.

The effective date at the top will reflect the latest revision.

 

14. Contact Us

If you have questions, want to exercise your rights, or have a privacy concern, please contact:

Maryland Children Health Center

 Location 1:

12150 Annapolis Rd, Suite 208

Glenn Dale, MD 20769

 Phone: (301) 218-0398

 Location 2:

6130 Oxon Hill Rd, Suite 202

Oxon Hill, MD 20745

 Phone: (301) 567-1767
Fax:
[…]
Email:
[…]

 

15. Complaints

You may file a complaint if you believe your child’s privacy rights were violated. You will not be penalized for filing a complaint.

You can complain to:

  1. Maryland Children Health Center Privacy Officer (contact above), and/or
  2. S. Department of Health and Human Services, Office for Civil Rights (OCR).

 

A quick note from us

We treat your child’s health information with the same care we use for their health—carefully, respectfully, and only for the right reasons. If you ever want clarity about how something is handled, just ask. We’re happy to walk you through it.

Maryland Children Health Center