HIPAA Notice of Privacy Practices

Protected Health Information (PHI) is information about you, including demographic information, that may identify you and relates to your past, present, or future physical or mental health condition and related healthcare services. This includes:

• •Prescription records and medication history
• •Medical diagnoses and conditions
• •Allergy information
• •Insurance and billing information
• •Conversations with healthcare providers
• •Any health information we receive from your doctors

We may use and disclose your health information for the following purposes without your authorization:

• •Treatment: To provide, coordinate, or manage your healthcare and related services
• •Payment: To obtain payment for services we provide to you
• •Healthcare Operations: For quality assessment, training, and business management
• •As Required by Law: When required by federal, state, or local law
• •Public Health Activities: To prevent or control disease, injury, or disability
• •Health Oversight: To agencies for audits, investigations, and inspections
• •Legal Proceedings: In response to court orders or subpoenas
• •Law Enforcement: When required for law enforcement purposes
• •Serious Threats: To prevent serious threat to health or safety
• •Workers' Compensation: As authorized by workers' compensation laws

You have the following rights with respect to your protected health information:

• •Right to Inspect and Copy: Request to review and obtain copies of your health records
• •Right to Amend: Request corrections to your health information
• •Right to an Accounting: Receive a list of disclosures we have made
• •Right to Request Restrictions: Request limitations on uses and disclosures
• •Right to Request Confidential Communications: Request communications by alternative means
• •Right to a Paper Copy: Obtain a paper copy of this notice at any time
• •Right to Notification: Be notified of breaches of unsecured PHI
• •Right to Opt-Out: Opt out of certain disclosures to health plans for self-pay services

We maintain physical, electronic, and procedural safeguards to protect your health information:

• •Secure storage of physical records in locked areas
• •Encrypted electronic health records and communications
• •Access controls and authentication requirements
• •Employee training on HIPAA privacy and security rules
• •Business associate agreements with vendors
• •Regular security risk assessments
• •Incident response and breach notification procedures
• •Audit controls and monitoring of access to PHI

If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. You will not be retaliated against for filing a complaint. To file a complaint with us, contact our Privacy Officer using the contact information below.