The Health Insurance Portability and Accountability Act (HIPAA; “Act”) of 1996, requires us as your health care provider to maintain the privacy of your protected health information, to provide you with notice of our legal duties and privacy practices upon request, and to notify affected individuals following a breach of unsecured protected health information. We are required to maintain these records of your health care and to maintain confidentiality of these records.

How We May Use or Disclose Your Health Information

The Act allows us to use your information for treatment, payment, and certain health operations unless otherwise prohibited by law and without your authorization. We need your written authorization to use or disclose your PHI for any purpose not covered by one of the categories below.

Certain ways that your protected health information could be used or disclosed and require an authorization from you: disclosure of psychotherapy notes, use or disclosure of your information for marketing, disclosures or uses that constitute a sale of protected health information, and any uses or disclosures not described in this NPP. We cannot disclose your protected health information to your employer or to your school without your authorization unless required by law. You have the right to revoke any or all authorizations to use or disclose PHI.

We may use or disclose you PHI for the following purposes:

  • Treatment: We may disclose your protected health information to you and to our staff or to other health care professionals who order tests or need access to your test results for treatment purposes. This includes information that may go to a pathologist to help interpret your test results, to a diagnostic center to assist with your diagnosis, or to the hospital should you need to be admitted.
  • Payment: We may send information to you or to your health plan in order to receive payment for the service or item we delivered. We may discuss the minimum necessary with friends or family members involved in your payment unless you request otherwise.
  • Healthcare operations: We are allowed to use or disclose your protected health information to train new health care workers, to evaluate the health care delivered, to improve our business development, or for other internal needs.
  • As Required by Law: We are required to disclose information as required by law, such as public health regulations, health care oversight activities, certain lawsuits, and law enforcement.
  • Business Associate: We may provide a person or organization your PHI as needed when providing certain services to us. Business associate functions can include claims processing, data analysis, utilization review, courier services and billing.
  • Personal Representatives: We may release your health information to a family member, friend, legal guardian, or other person who is involved in your healthcare or payment for services we provide to you, with your disclosure authorization.
  • Research: We may use or disclose a limited data set to researchers for research purposes, provided that we assure that the researcher will protect your health information.
  • Other Uses and Disclosures: For other uses or disclosures not contained in this Notice, or permitted or required by law, we will obtain your authorization for that use or disclosure.

Your Patient Rights

  • Right to Inspect/Copy: Except in certain circumstances like psychotherapy notes, you have the right to access your records and/or to receive a copy of your records. Your request must be in writing, and we must verify your identity before allowing the requested access. We are required to allow the access or provide the copy within 30 days of your request. We may provide the copy to you or to your designee in an electronic format acceptable to you or as a hard copy. We may charge you our cost for making and providing the copy. If your request is denied, you may request a review of this denial by a licensed health care provider.
  • Right to Request Restrictions: You have the right to request restrictions on how your protected health information is used for treatment, payment, and health operations. For example, you may request that a certain friend or family member not have access to this information. We are not required to agree to this request, except for requests to limit disclosures to your health plan for purposes of payment or healthcare operations when you have paid in full out-of-pocket and when the disclosures are not required by law.
  • Right to Request Confidential Communications: You have the right to request confidential communications by an alternative means or location, and we will accommodate reasonable requests. These requests must be in writing, may be revoked in writing, and must give us an effective means of communication for us to comply.
  • Right to Amend: Your medical records are legal documents that provide crucial information regarding your care. You have the right to request an amendment to your medical records, but you must make this request in writing and understand that we are not required to grant this request. If the request is denied, we will provide a written explanation of the reason for denial and allow you to submit a statement of disagreement for inclusion in the record.
  • Right to Accounting of Disclosures: You have a right to an accounting of the disclosures of your PHI made by NOAH Clinical Laboratory in the past six years preceding the date of the written request. Under the law, HIPAA does not require certain disclosures such as treatment, payment or healthcare operations or certain other purposes.
  • Right to be Notified: You have the right to be notified of a breach of the security of your PHI, unless there is a low probability your PHI has been compromised.
  • Right to Revoke Authorization: You have the right to opt out of marketing or fund-raising communications.
  • Right to a Copy of This Notice: You have the right to receive an electronic or paper copy of this notice, upon request.


You may write or email our Privacy Officer with your specific requests, questions about our privacy practices, or to request a form to obtain a copy of your test results.

If you believe your privacy rights have been violated, you may file a complaint with NOAH Clinical Laboratory’s Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not discriminate or retaliate in any way for this action.

NOAH Clinical Laboratory
Attn: Privacy Officer
10501 W. Greenfield Ave.
West Allis, WI 53214
Phone Number: (414) 600-1020

We are required to abide by the policies stated in this Privacy Notice, which became effective on 7/12/21.