The medical group may use and disclose your PHI to provide, coordinate and manage your healthcare. The Notice says this may include reviewing information you share through the WHOOP platform, consulting other healthcare professionals involved in your care, documenting care in the electronic medical record, coordinating follow-up care, ordering or reviewing laboratory tests, prescribing medications where appropriate, and communicating with you about treatment. As an example, a clinician may review your sleep, activity or physiological information together with questionnaire responses and other clinical information to evaluate your health, develop a treatment plan or monitor your progress.
Details
What it does
use and disclose PHI
Why
provide, coordinate and manage healthcare
What it covers
information shared through the WHOOP platform, sleep, activity, physiological information
Supporting quotations
We may use and disclose your PHI to provide, coordinate, and manage your healthcare.
reviewing information you share through the WHOOP platform
prescribing medications where appropriate
A clinician may review your sleep, activity, or physiological information together with questionnaire responses and other clinical information to evaluate your health, develop a treatment plan, or monitor your progress.
Qualifications & exceptions
The activities are introduced with 'may include' and are not a closed list.
The clinician example is illustrative, not a statement that this review always occurs.
Not stated here
The Notice does not say which WHOOP platform data a clinician will actually see.
Use & Processing · Permission or license
PHI may be used and disclosed for healthcare operations
The medical group may use and disclose PHI to support the operation, administration, quality and improvement of its healthcare services. Examples listed are quality assessment and improvement, clinical training and supervision, credentialing and licensing, business planning and administration, security and fraud prevention, and compliance and auditing.
Details
What it does
use and disclose PHI
Why
operation, administration, quality and improvement of healthcare services
Supporting quotations
We may use and disclose PHI to support the operation, administration, quality, and improvement of our healthcare services.
Quality assessment and improvement activities
Clinical training and supervision
Credentialing and licensing activities
Business planning and administration
Security and fraud prevention
Compliance and auditing activities
Qualifications & exceptions
The activities are introduced as examples, not a closed list.
Not stated here
The Notice does not say who receives PHI for these activities beyond what is stated elsewhere.
Cross-references
qualified by (model-proposed): Right to ask for limits on use or disclosure, and the out-of-pocket exception — The right to ask for limits on use or disclosure for treatment, payment or healthcare operations qualifies the general permission to use PHI for healthcare operations; the group need not agree to a request.
Use & Processing · Company practice
Telehealth technologies and how PHI from them is handled
The WHOOP Covered Entity may provide healthcare through telehealth technologies, including video visits, audio communications, secure messaging, electronic questionnaires, remote monitoring tools and other digital health technologies. PHI collected or generated during telehealth encounters will be used and disclosed as described in this Notice.
Details
What it covers
PHI collected or generated during telehealth encounters
What it does
used and disclosed as described in this Notice
Supporting quotations
may provide healthcare services through telehealth technologies, including video visits, audio communications, secure messaging, electronic questionnaires, remote monitoring tools, and other digital health technologies
PHI collected or generated during telehealth encounters will be used and disclosed as described in this Notice.
Qualifications & exceptions
The technologies are listed with 'including' and are not a closed list.
Use & Processing · Permission or license
Contact about appointments and health-related services
The medical group may contact you about appointments, treatment alternatives, follow-up care, care management programs, prescription information or other health-related services that may be relevant to your care.
Details
What it does
contact you
Why
appointments, treatment alternatives, follow-up care, care management, prescriptions, health-related services
Supporting quotations
We may contact you regarding appointments, treatment alternatives, follow-up care, care management programs, prescription information, or other health-related services that may be relevant to your care.
Qualifications & exceptions
Contact is limited to matters that may be relevant to your care, as stated.
Not stated here
The Notice does not say by which channel these contacts are made in this section; a later section lists electronic channels.
Use & Processing · Permission or license
Electronic communications and patient access tools
The medical group may communicate with you electronically through the WHOOP platform, patient portals, secure messaging systems, email, text message or other electronic means as permitted by law. The Notice says available technologies may let you access portions of your health information, communicate with providers, review treatment information and manage aspects of your care.
Details
What it does
communicate with you electronically
Condition
as permitted by law
Supporting quotations
ELECTRONIC COMMUNICATIONS AND PATIENT ACCESS
We may communicate with you electronically through the WHOOP platform, patient portals, secure messaging systems, email, text message, or other electronic means as permitted by law.
Available technologies may allow you to access portions of your health information, communicate with providers, review treatment information, and manage aspects of your care.
Qualifications & exceptions
Electronic communication is stated 'as permitted by law'.
Patient access is described as what available technologies 'may allow', not a guarantee.
Not stated here
The Notice does not say whether email or text messages are encrypted or how you can opt out of particular channels.