Notice of Privacy Practices
Pursuant to the Health Insurance Portability and Accountability Act (HIPAA)
Our Commitment to Your Privacy
This Practice is committed to maintaining the privacy of your protected health information (“PHI”). PHI is information about you, including demographic data, that may identify you and relates to your past, present, or future physical or mental health condition and related healthcare services. We are required by HIPAA, the HITECH Act, and Connecticut state law to maintain the privacy and security of your PHI, provide you with this Notice of our legal duties and privacy practices, and abide by the terms of the Notice currently in effect.
How We May Use and Disclose Your PHI
A. Uses and Disclosures That Do Not Require Your Authorization
We may use and disclose your PHI to provide, coordinate, or manage your healthcare and any related services. This includes consultations with other healthcare providers involved in your care.
We may use and disclose your PHI to bill and collect payment for services provided. This may include submitting claims to your health insurer, verifying insurance coverage, and conducting utilization review activities.
We may use and disclose your PHI for our healthcare operations, which include quality assessment and improvement, reviewing competence or qualifications of healthcare professionals, conducting training programs, accreditation activities, compliance activities, and business management.
We may contact you to remind you of appointments or provide information about treatment alternatives or health-related benefits and services that may be of interest to you.
We will disclose your PHI when required to do so by federal, state, or local law, including Connecticut General Statutes.
We may disclose your PHI for public health activities, such as reporting communicable diseases, vital statistics, child abuse or neglect, adverse events with medications or devices, and product recalls.
We may disclose your PHI to health oversight agencies for audits, investigations, inspections, and licensure activities.
We may disclose your PHI in response to a court order, subpoena, discovery request, or other lawful process.
We may disclose your PHI for law enforcement purposes as required by law or in response to a valid warrant, summons, or similar process.
We may use and disclose your PHI when necessary to prevent a serious and imminent threat to your health or safety or the health or safety of another person or the public.
We may disclose your PHI as authorized by and to the extent necessary to comply with Connecticut workers’ compensation law.
We may disclose your PHI to a coroner, medical examiner, or funeral director as necessary for them to carry out their duties.
B. Uses and Disclosures That Require Your Written Authorization
Other uses and disclosures of your PHI not covered by this Notice or applicable laws will be made only with your written authorization. You may revoke an authorization at any time in writing, except to the extent that we have already acted in reliance upon it. The following uses and disclosures require your signed authorization:
Most uses and disclosures of psychotherapy notes
Uses and disclosures of PHI for marketing purposes
Disclosures that constitute a sale of PHI
Other uses and disclosures not described in this Notice
Your Rights Regarding Your PHI
You have the right to inspect and obtain a copy of your PHI maintained in a designated record set. Requests must be made in writing. We may charge a reasonable fee for copying, mailing, or other supplies.
You have the right to request that we amend your PHI. Requests must be made in writing and must state the reason for the amendment. We may deny the request under certain circumstances.
You have the right to receive an accounting of certain disclosures of your PHI made during the six (6) years prior to your request.
You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations. We are not required to agree to your request, except that we must comply with a request to restrict disclosure to a health plan for payment or healthcare operations purposes when you have paid for the service in full out of pocket.
You have the right to request that we communicate with you about your PHI by alternative means or at alternative locations (e.g., by mail to a specific address rather than to your home).
You have the right to obtain a paper copy of this Notice at any time upon request.
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be penalized or retaliated against for filing a complaint.
Connecticut-Specific Privacy Protections
In addition to federal HIPAA requirements, your health information is protected under Connecticut law, including:
Conn. Gen. Stat. § 52-146o et seq. – Confidentiality of health records
Conn. Gen. Stat. § 52-146d et seq. – Confidentiality of communications with psychiatrists and psychologists
Conn. Gen. Stat. § 19a-583 et seq. – Confidentiality of HIV/AIDS-related information
Conn. Gen. Stat. § 17a-688 – Confidentiality of substance abuse treatment records
Where Connecticut law provides greater privacy protection than HIPAA, we will follow the more protective standard.
Changes to This Notice
We reserve the right to change the terms of this Notice at any time. The revised Notice will apply to all PHI we maintain. Copies of the revised Notice will be available at our office and on our website.