HIPAA Compliance Notice

HIPAA Compliance Notice

Notice of Privacy Practices

Last Updated: August 1, 2025


Our Commitment to Your Privacy

We are committed to protecting your medical information. We create and maintain records of the care we provide to you and may receive such records from other healthcare providers. This information is used to deliver quality care, obtain payment for services, and meet our legal and professional obligations.

By law, we are required to:

  • Maintain the privacy of your protected health information (PHI)

  • Provide you with this Notice of Privacy Practices

  • Follow the terms of this notice

  • Notify you if there is a breach of your unsecured protected health information

This notice explains how we may use and disclose your health information, your rights regarding your medical information, and our legal obligations.
If you have questions about this notice, please contact our Office Manager.


How We Use and Disclose Your Health Information

We collect health information about you and store it in a medical record, which may be maintained in paper form, electronically, or in an electronic health record (EHR). The medical record is the property of this medical practice; however, the information within it belongs to you.

The law permits us to use or disclose your health information for the following purposes:

Treatment

We use your health information to provide medical care and may share it with other healthcare professionals involved in your treatment. This includes physicians, pharmacists, laboratories, and family members assisting in your care.

Payment

We may use and disclose your health information to obtain payment for services provided. This may include sharing information with your health plan or other providers involved in billing and payment activities.

Health Care Operations

We may use and disclose your information to support the operation of our practice, including:

  • Quality assessment and improvement activities

  • Staff evaluation and training

  • Business planning and administrative management

  • Legal, audit, and compliance activities

We may use electronic communications, such as email or patient portals, in accordance with applicable privacy and security standards.

We may also share your information with business associates who perform services on our behalf, provided they agree to safeguard your information.

We do not sell your health information or use it for marketing purposes without your written authorization. You may revoke such authorization at any time.


Other Permitted Uses and Disclosures

We may use or disclose your health information without your written authorization for the following purposes:

  • Appointment Reminders & Communication
    To contact you regarding appointments or provide information about treatments or services.

  • Family Members & Caregivers
    To communicate with individuals involved in your care, unless you object.

  • Public Health & Safety Activities
    As required by law, including reporting abuse or neglect, preventing threats to health or safety, and supporting public health initiatives.

  • Legal & Administrative Proceedings
    In response to court orders, subpoenas, or other lawful processes.

  • Law Enforcement
    When required to assist law enforcement activities.

  • Health Oversight Activities
    For audits, investigations, inspections, and licensure activities.

  • Research
    For approved research projects that meet applicable privacy requirements.

  • Workers’ Compensation
    To comply with workers’ compensation and similar laws.

  • Business Associates
    With contracted service providers under strict confidentiality obligations.

  • Change of Ownership
    In the event of a sale, merger, or transfer of the practice.


Your Rights Regarding Your Health Information

You have the right to:

  • Request restrictions on certain uses and disclosures

  • Request confidential communications

  • Inspect and obtain copies of your medical records

  • Request corrections or amendments to your records

  • Receive an accounting of certain disclosures

  • Obtain a paper or electronic copy of this Notice of Privacy Practices


Our Responsibilities

We are required by law to:

  • Maintain the privacy and security of your protected health information

  • Provide you with this notice of our legal duties and privacy practices

  • Follow the terms of the current notice

  • Notify you in the event of a breach of unsecured protected health information


Changes to This Notice

We reserve the right to modify this notice and apply the revised notice to health information we already maintain, as well as information received in the future. The current notice will be posted in our office and on our website and will include the effective date.


Complaints

If you believe your privacy rights have been violated, you may file a complaint with:

  • Our office (contact the Office Manager), or

  • The U.S. Department of Health and Human Services, Office for Civil Rights

You will not be penalized or retaliated against for filing a complaint.