Notice of Privacy Practices and Rights

I understand that health information about you and your health care is personal. I am committed to protecting health information about you. I create a record of the care and services you receive from me. I need this record to provide you with quality care and to comply with certain legal requirements. This applies to all of the records of your care generated by during treatment. I provide a notice which will tell you about the ways in which I may use and disclose health information about you. I also describe your rights to the health information I keep about you, and describe certain obligations I have regarding the use and disclosure of your health information.

HOW I MAY USE AND DISCLOSE HEALTH INFORMATION ABOUT YOU:

🌿 Notice of Privacy Practices (Updated for 2026)

Effective Date: February 16, 2026

THIS NOTICE DESCRIBES HOW YOUR MEDICAL AND MENTAL HEALTH INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Your privacy matters deeply. This Notice explains how your health information — including any Substance Use Disorder (SUD) treatment information protected under 42 CFR Part 2 — may be used, shared, and protected. It also outlines your rights and how you can exercise them.

🌱 How Your Information May Be Used and Shared

Treatment, Payment, and Healthcare Operations

I may use or share your information to:

• Provide, coordinate, or manage your care

• Consult with other healthcare professionals

• Process payment for services

• Support administrative or clinical operations

Under the 2026 updates, a single patient consent may cover future uses and disclosures of SUD records for treatment, payment, and healthcare operations.

When Your Information May Be Shared Without Your Written Authorization

HIPAA and 42 CFR Part 2 allow certain disclosures without your written permission, including:

• When required by law

• Medical emergencies

• Public health reporting (only if information is de‑identified per HIPAA standards)

• Oversight activities (audits, inspections)

• Research under strict privacy safeguards

• To prevent or lessen a serious and imminent threat

I will only disclose the minimum necessary information.

Legal Protections for Substance Use Disorder (SUD) Records

Your SUD treatment information receives extra protection under 42 CFR Part 2. These records:

• Cannot be used in civil, criminal, administrative, or legislative proceedings against you without your written consent or a specific court order

• Cannot be shared for fundraising without giving you a clear opportunity to opt out

• Are protected by the HIPAA Breach Notification Rule — meaning you will be notified if a breach occurs

If an investigative agency receives Part 2 records without the required court order, they must follow a safe harbor process to correct the error.

Redisclosure Notice

Information shared under HIPAA may be redisclosed by the recipient and may no longer be protected by HIPAA.

However, SUD records disclosed under 42 CFR Part 2 remain protected and cannot be redisclosed unless permitted by Part 2.

🌿 Your Rights

You have the right to:

Access Your Records

Request to view or obtain a copy of your health information.

Request Corrections

Ask for corrections if you believe your information is incomplete or inaccurate.

Request Restrictions

Ask to limit how your information is used or shared.

Under the 2026 updates, you may request restrictions on certain disclosures of SUD records.

Receive an Accounting of Disclosures

You may request a list of certain disclosures of your SUD records and other protected health information.

Request Confidential Communications

Ask to be contacted in a specific way (e.g., phone, email) or at a specific location.

Receive a Paper or Electronic Copy of This Notice

You may request a copy at any time.

File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with:

• My practice

• The U.S. Department of Health and Human Services (HHS)

You will not be penalized for filing a complaint.

🌱 Your Choices

You may choose to:

• Authorize or decline the release of your information

• Revoke an authorization at any time (except when already acted upon)

• Opt out of fundraising communications involving Part 2 records

🌿 My Responsibilities

I am required to:

• Maintain the privacy and security of your protected health information

• Follow the duties and privacy practices described in this Notice

• Notify you if a breach occurs involving your protected information, including SUD records

• Provide updates to this Notice when laws change

🌱 Questions or Concerns?

If you have questions about this Notice or your privacy rights, please contact me directly. I’m committed to protecting your confidentiality and ensuring you feel safe in every aspect of your care.