Introduction
At [Your Practice Name], we are committed to maintaining the confidentiality and privacy of your protected health information (PHI). This Privacy Policy outlines how we collect, use, and protect your PHI in accordance with federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA).
Our Responsibilities
- Maintaining Confidentiality: We implement reasonable and appropriate physical, administrative, and technical safeguards to protect your PHI.
- Providing Notice: This Privacy Policy informs you of our legal duties and privacy practices regarding your PHI.
- Abiding by This Notice: We adhere to the terms of this notice and update it as necessary.
- Training Personnel: Our staff is trained on privacy and confidentiality policies.
- Sanction Policy: We have a policy to discipline those who breach privacy/confidentiality.
- Mitigating Breaches: We take steps to lessen the harm of any privacy breach.
Your Rights
- Access and Amend Records: You have the right to access and amend your PHI.
- Request Confidential Communications: You can request that we communicate with you in a specific way.
- Request Restrictions: You can ask us to limit how we use or disclose your PHI.
- Revoke Consent: You can revoke your consent or authorization for using or disclosing your PHI, except where we have already acted on it.
How We Use and Disclose PHI
- Treatment, Payment, and Operations: We use and disclose PHI for treatment, payment, and healthcare operations.
- With Your Consent: We will not disclose PHI without your consent, except as permitted by law.
- Marketing and Sales: We do not use or disclose PHI for marketing or sales purposes without your explicit authorization.
Confidentiality in Group Therapy
- Group Members’ Agreement: All participants in group therapy must sign a confidentiality agreement to maintain the privacy of other group members.
- Limitations: While we encourage confidentiality, we cannot guarantee it outside the group setting.
Electronic Record Keeping
- Secure Systems: We use encrypted and password-protected systems for storing and managing PHI.
- TherapyNotes: Our electronic records are maintained through TherapyNotes, which provides secure and encrypted storage.
Contact Information
If you have questions or concerns about this Privacy Policy, please contact us at:
[Your Practice Address]
[Your Practice Phone Number]
[Your Practice Email]
Effective Date
This Privacy Policy is effective as of [Date] and will be updated as necessary to comply with changing laws and regulations.
HIPAA Privacy Notice
This notice describes how we handle your PHI. By signing the acknowledgement form, you consent to our privacy policies and procedures.