This document contains important information about federal law, the Health Insurance Portability and Accountability Act (HIPAA), that provides privacy protections and patient rights with regard to the use and disclosure of your Protected Health Information (PHI) used for the purpose of treatment, payment, and health care operations.
HIPAA requires that I provide you with a Notice of Privacy Practices (the Notice) for use and disclosure of PHI for treatment, payment and health care operations. The Notice explains HIPAA and its application to your PHI in greater detail.
The law requires that I obtain your signature acknowledging that I have provided you with this. If you have any questions, it is your right and obligation to ask so I can have a further discussion prior to signing this document. When you sign this document, it will also represent an agreement between us. You may revoke this Agreement in writing at any time. That revocation will be binding unless I have taken action otherwise.
OVERVIEW
I am required by law to:
- Make sure that protected health information (“PHI”) that identifies you is kept private.
- Give you this notice of my legal duties and privacy practices with respect to health information.
- Follow the terms of the notice that is currently in effect.
- I can change the terms of this Notice, and such changes will apply to all information I have about you. The new Notice will be available upon request, in my office, and on my website.
PROFESSIONAL RECORD-KEEPING: The laws and standards of my profession require that I keep treatment records. You are entitled to view your records unless I believe that seeing them would be emotionally damaging, in which case I can provide a summary of the records instead. Because these are professional records, they can be misinterpreted and/or upsetting to untrained readers. I recommend that you review them, or the summary I provide, with me or with a licensed mental health professional of your choice.
LIMITS ON CONFIDENTIALITY: The law protects the privacy of all communication between a patient and a therapist. In most situations, I can only release information about your treatment to others if you sign a written authorization form that meets certain legal requirements imposed by HIPAA. There are some situations where I am permitted or required to disclose information without either your consent or authorization. If such a situation arises, I will limit my disclosure to what is necessary. Reasons I may have to release your information without authorization:
A. Certain uses and disclosures relating to treatment, payment, or health care operations do not require your prior written consent. I can use and disclose your PHI without your consent for the following reasons:
- For treatment: I can disclose your PHI to physicians, psychiatrists, psychologists, or any other licensed health care providers who provide you with health care services or are involved in your care. For example, if you're being treated by a psychiatrist, I can disclose your PHI to your psychiatrist in order to coordinate your care.
- To facilitate payment for treatment: I can use and disclose your PHI to bill for the treatment and services provided by me to you. For example, I might send your PHI to your insurance company or health plan regarding the health care services that I have provided to you. I may also provide your PHI to my business associates, such as billing companies, claims processing companies, and others that process my healthcare claims.
- For health care operations: I can disclose your PHI to operate my practice. I may provide your PHI to our accountants, attorneys, consultants, and others to make sure I am complying with applicable laws
- Other disclosures: I may also disclose your PHI to others without your consent in certain situations. For example, your consent isn't required if you need emergency treatment, as long as I try to get your consent after treatment is rendered, or if I try to get your consent but you are unable to communicate with me (for example, if you are unconscious or in severe pain) and I think that you would consent to such treatment if you were able to do so
B. There are additional uses and disclosures that do not require your consent. I can use and disclose your PHI without your consent or authorization for the following reasons:
- When disclosure is required by federal, state or local law; judicial or administrative proceedings; or, law enforcement: If a government agency is requesting the information for health oversight activities, within its appropriate legal authority, I may be required to provide it for them. For example, I may make a disclosure to applicable officials when a law requires me to report information to government agencies and law enforcement personnel about victims of abuse or neglect; or when ordered in a judicial or administrative proceeding.
- Lawsuits and Disputes: If you are involved in a court proceeding and a request is made for information concerning your diagnosis and treatment, such information is protected by the psychologist-patient privilege law. Some circumstances may require that I disclose health information in response to a court or administrative order. If you are involved in a lawsuit, I may also be requested disclose health information about your child in response to a subpoena, discovery request, or other lawful process by someone else involved in the dispute, but only if efforts have been made to tell you about the request or to obtain an order protecting the information requested. I cannot provide any information without your (or your legal representative's) written authorization, or a court order, or if I receive a subpoena of which you have been properly notified and you have failed to inform me that you oppose the subpoena. I If you are involved in or contemplating litigation, you should consult with an attorney to determine whether a court would be likely to order me to disclose information.
- For public health activities: For example, I may have to report information about you to the county coroner.
- For health oversight activities: For example, I may have to provide information to assist the government when it conducts an investigation or inspection of a healthcare provider or organization.
- For research purposes: In certain circumstances, I may provide PHI in order to conduct medical research.
- For specific government functions: I may disclose PHI of military personnel and veterans in certain situations. And I may disclose PHI for national security purposes, such as protecting the President of the United States or conducting intelligence operations.
- For workers' compensation purposes: If a patient files a worker's compensation claim, and I am providing necessary treatment related to that claim, I must, upon appropriate request, submit treatment reports to the appropriate parties, including the patient's employer, the insurance carrier or an authorized qualified rehabilitation provider.
- Appointment reminders and health related benefits or services: I may use PHI to provide appointment reminders or give you information about treatment alternatives, or other health care services or benefits I offer.
- Supervision and/or Consultations: I may disclose the minimum necessary health information to my business associates that perform functions on our behalf or provide us with services if the information is necessary for such functions or services. My business associates sign agreements to protect the privacy of your information and are not allowed to use or disclose any information other than as specified in our contract.
- To avoid harm: In order to avoid a serious threat to the health or safety of a person or the public, I may provide PHI to law enforcement personnel or persons able to prevent or lessen such harm.
C. There are some situations in which I am legally obligated to take actions, which I believe are necessary to attempt to protect others from harm, and I may have to reveal some information about a patient's treatment:
- If I know, or have reason to suspect, that a child under 18 has been abused, abandoned, or neglected by a parent, legal custodian, caregiver, or any other person responsible for the child's welfare, the law requires that I file a report with the New York State Central Registry. Once such a report is filed, I may be required to provide additional information.
- If I know or have reasonable cause to suspect that a vulnerable adult has been abused, neglected, or exploited, the law requires that I file a report with the New York State Central Registry. Once such a report is filed, I may be required to provide additional information.
- If I believe that there is a clear and immediate probability of physical harm to the patient, to other individuals, or to society, I may be required to disclose information to take protective action, including communicating the information to the potential victim, and/or appropriate family member, and/or the police or to seek hospitalization of the patient.
D. Certain uses and disclosures require you to have the opportunity to object. Disclosures to family, friends, or others: I may provide your PHI to a family member, friend, or other person that you indicate is involved in your care or the payment for your health care, unless you object in whole or in part. The opportunity to consent may be obtained retroactively in emergency situations.
E. Other uses and disclosures require your prior written authorization. In any other situation not described in sections A, B, C, and D above, I will ask for your written authorization before using or disclosing any of your PHI. If you choose to sign an authorization to disclose your PHI, you can later revoke such authorization in writing to stop any future uses and disclosures (to the extent that I have not taken any action relying on such authorization) of your PHI by me.
USES AND DISCLOSURES THAT REQUIRE YOUR AUTHORIZATION
Psychotherapy Notes. I do keep “psychotherapy notes” as that term is defined in 45 CFR § 164.501, and any use or disclosure of such notes requires your Authorization unless the use or disclosure is:
a.) For my use in treating you.
b.) For my use in training or supervising mental health practitioners to help them improve their skills in group, joint, family, or individual counseling or therapy.
c.) For my use in defending myself in legal proceedings instituted by you.
d.) For use by the Secretary of Health and Human Services to investigate my compliance with HIPAA.
e.) Required by law and the use or disclosure is limited to the requirements of such law.
f.) Required by law for certain health oversight activities pertaining to the originator of the psychotherapy notes.
g.) Required by a coroner who is performing duties authorized by law.
h.) Required to help avert a serious threat to the health and safety of others.
i.) As a mental health provider, I will not use or disclose your PHI for marketing purposes.
j.) As a mental health provider, I will not sell your PHI in the regular course of my business.
CLIENT RIGHTS & THERAPIST DUTIES
Use and Disclosure of Protected Health Information:
- For Treatment – I use and disclose your health information internally in the course of your treatment. If I wish to provide information outside of our practice for your treatment by another health care provider, I will have you sign an authorization for release of information. Furthermore, an authorization is required for most uses and disclosures of psychotherapy notes.
- For Payment – I may use and disclose your health information to obtain payment for services provided to you as delineated in the Therapy Agreement.
- For Operations – I may use and disclose your health information as part of our internal operations. For example, this could mean a review of records to assure quality. I may also use your information to tell you about services, educational activities, and programs that I feel might be of interest to you.
Patient's Rights
- Right to Treatment – You have the right to ethical treatment without discrimination regarding race, ethnicity, gender identity, sexual orientation, religion, disability status, age, or any other protected category.
- Right to Confidentiality – You have the right to have your health care information protected. If you pay for a service or health care item out-of-pocket in full, you can ask us not to share that information for the purpose of payment or our operations with your health insurer. I will agree to such unless a law requires us to share that information.
- Right to Request Restrictions – You have the right to request restrictions on certain uses and disclosures of protected health information about you. However, I am not required to agree to a restriction you request.
- Right to Receive Confidential Communications by Alternative Means and at Alternative Locations – You have the right to request and receive confidential communications of your PHI by alternative means and at alternative locations.
- Right to Inspect and Copy – You have the right to inspect or obtain a copy (or both) of your PHI. Records must be requested in writing and release of information must be completed. Furthermore, there is a copying fee charge of $1.00 per page. Please make your request well in advance and allow 2 weeks to receive the copies. If I refuse your request for access to your records, you have a right of review, which I will discuss with you upon request.
- Right to Amend – If you believe the information in your records is incorrect and/or missing important information, you can ask us to make certain changes, also known as amending, to your health information. You have to make this request in writing. You must tell us the reasons you want to make these changes, and I will decide if it is and if I refuse to do so, I will tell you why within 60 days.
- Right to a Copy of This Notice – If you received the paperwork electronically, you have a copy in your email. If you completed this paperwork in the office at your first session a copy will be provided to you per your request or at any time.
- Right to an Accounting – You generally have the right to receive an accounting of disclosures of PHI regarding you. On your request, I will discuss with you the details of the accounting process.
- Right to Choose Someone to Act for You – If someone is your legal guardian, that person can exercise your rights and make choices about your health information; I will make sure the person has this authority and can act for you before I take any action.
- Right to Choose – You have the right to decide not to receive services with me. If you wish, I will provide you with names of other qualified professionals.
- Right to Terminate – You have the right to terminate therapeutic services with me at any time without any legal or financial obligations other than those already accrued. I ask that you discuss your decision with me in session before terminating or at least contact me by phone letting me know you are terminating services.
- Right to Release Information with Written Consent – With your written consent, any part of your record can be released to any person or agency you designate. Together, we will discuss whether or not I think releasing the information in question to that person or agency might be harmful to you.
Therapist’s Duties: I am required by law to maintain the privacy of your PHI and to provide you with a notice of my legal duties and privacy practices with respect to your PHI. I reserve the right to change the privacy policies and practices described in this notice. Unless I notify you of such changes, however, I am required to abide by the terms currently in effect. If I revise my policies and procedures, I will provide you with a revised notice in office during our session.
COMPLAINTS: If you think that I may have violated your privacy rights, or you disagree with a decision I made about access to your PHI, you may file a complaint with the person listed below. You also may send a written complaint to the Secretary of the Department of Health and Human Services at 200 Independence Avenue S.W., Washington, D.C. 20201. I will take no retaliatory action against you if you file a complaint about my privacy practices.
Who to contact for information about this Notice or to complain about my privacy practices: If you have any questions about this Notice or any complaints about my privacy practices or would like to know how to file a complaint with the Secretary of the Department of Health and Human Services, please contact me.