Privacy Policy

Within Into Action Recovery Personnel

We may share PHI among staff members who require it to provide treatment, process billing, verify insurance, manage operations, obtain accreditation, or meet licensing requirements.

Secretary of Health and Human Services

We must disclose PHI to the U.S. Department of Health and Human Services when requested to assess compliance with HIPAA regulations.

Business Associates

We may disclose PHI to contracted Business Associates who help perform services on our behalf. They must:

• Protect your PHI
• Use it only for contracted purposes
• Comply with 42 CFR Part 2
• Resist unauthorized disclosure attempts unless permitted by law

Crimes on Premises

We may disclose information directly related to crimes committed at the facility, against personnel, or threats of such crimes.

Reports of Suspected Child Abuse or Neglect

We may disclose information required by state law to authorized agencies, though original treatment records may only be released with proper consent or authorization.

Court Orders

We may disclose PHI as required by a valid court order that meets applicable regulatory requirements.

Emergency Situations

We may share PHI with medical personnel as necessary to treat a medical emergency.

Research

We may use or disclose PHI for research that meets federal regulatory approval requirements.

Audit and Evaluation

We may disclose PHI to authorized individuals conducting audits or evaluations, subject to strict restrictions.

Reporting a Death

We may disclose information related to cause of death to an authorized public health authority.

Authorization to Use or Disclose PHI

Any use or disclosure not outlined above requires your written authorization. This includes:

• Psychotherapy notes
• Use of PHI for marketing
• Sale of PHI

You may revoke authorization in writing at any time, except for actions already taken based on your prior consent.

Patient / Client Rights

Right to Notice

You have the right to receive a paper or electronic copy of this Notice at any time. It is also accessible on our website or from facility staff.

Right of Access

You may inspect or obtain copies of your PHI. Requests must be submitted in writing. We may deny certain requests as permitted by law, and you may request review of denials. Reasonable, cost-based fees may apply.

Electronic PHI will be provided in a readily producible format, or another agreed-upon format if necessary.

Right to Amend

You may request amendments to your PHI if you believe it is incomplete or inaccurate. Requests must be in writing and include a reason. We may deny requests under specific circumstances and will provide written rationale for any denial.

Right to an Accounting of Disclosures

You may request an accounting of certain disclosures made in the past six years. Requests must be made in writing. Requests beyond one per 12-month period may incur reasonable fees.

Right to Request Restrictions

You may request restrictions on the use or disclosure of your PHI for treatment, payment, or operations. While we are not required to agree, we will comply with any approved restriction unless legally permitted to override it.

Right to Restrict Disclosure After Out-of-Pocket Payment

If you pay for a service entirely out-of-pocket, you may request that we not disclose related PHI to your health plan.

Right to Confidential Communications

You may request that we communicate PHI through specific methods or to specific locations. We will accommodate reasonable requests.

Right to Notification of a Breach

You will be notified in the event of a breach involving unsecured PHI.

Right to File a Complaint

You may file a written complaint with us or with the U.S. Department of Health and Human Services if you believe your rights have been violated. We will not retaliate against you for filing a complaint.