HIPAA Notice
Notice of Privacy Practices for Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA)
Effective Date
This Notice of Privacy Practices is effective as of January 1, 2024, and describes how medical information about you may be used and disclosed and how you can get access to this information.
Our Commitment to Your Privacy
MentalSpace School is committed to protecting the privacy and confidentiality of your health information. We are required by law to maintain the privacy of your protected health information (PHI) and to provide you with this notice of our legal duties and privacy practices. We must follow the privacy practices described in this notice while it is in effect.
How We May Use and Disclose Your Health Information
Treatment
We may use your health information to provide, coordinate, or manage your mental health care and services. Examples include:
- Conducting mental health assessments and screenings
- Developing treatment plans and recommendations
- Coordinating care with other healthcare providers
- Providing crisis intervention services
- Communicating with school personnel involved in your care
Payment
We may use and disclose your health information to obtain payment for services. Examples include:
- Billing insurance companies or government programs
- Determining eligibility for coverage
- Processing claims and obtaining prior authorization
- Collection activities for outstanding balances
Healthcare Operations
We may use and disclose your health information for healthcare operations. Examples include:
- Quality assessment and improvement activities
- Training students and healthcare professionals
- Accreditation and licensing activities
- Business planning and management
- Legal and compliance activities
Special Situations
Emergency Situations
We may use or disclose your health information in emergency situations or when required for treatment, even if we cannot obtain your authorization.
Public Health Activities
We may disclose health information to public health authorities for activities such as preventing or controlling disease, injury, or disability.
Law Enforcement
We may disclose health information to law enforcement officials for law enforcement purposes as permitted or required by law.
Judicial and Administrative Proceedings
We may disclose health information in response to a court order, subpoena, or other legal process.
Serious Threat to Safety
We may use or disclose health information when necessary to prevent a serious and imminent threat to your health and safety or the health and safety of others.
Your Rights Regarding Your Health Information
Right to Access
You have the right to inspect and obtain a copy of your health information, with limited exceptions. We may charge a reasonable fee for copying and mailing costs.
Right to Amend
You have the right to request that we amend your health information if you believe it is incorrect or incomplete. We may deny your request under certain circumstances.
Right to an Accounting
You have the right to request an accounting of disclosures of your health information made by us for certain purposes during the six years prior to your request.
Right to Request Restrictions
You have the right to request restrictions on how we use or disclose your health information. We are not required to agree to your request except in certain limited circumstances.
Right to Request Confidential Communications
You have the right to request that we communicate with you about your health information in a certain way or at a certain location.
Right to a Paper Copy of This Notice
You have the right to obtain a paper copy of this notice from us upon request, even if you have agreed to receive the notice electronically.
Minimum Necessary Standard
When using or disclosing health information or when requesting health information from another covered entity, we will make reasonable efforts to limit the information to the minimum necessary to accomplish the purpose of the use, disclosure, or request.
Security Safeguards
We maintain physical, electronic, and procedural safeguards to protect your health information, including:
- Secure electronic systems with encryption and access controls
- Limited access to health information on a need-to-know basis
- Employee training on privacy and security practices
- Physical security measures for facilities and equipment
- Regular security assessments and updates
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the Secretary of the Department of Health and Human Services. You will not be retaliated against for filing a complaint.
To file a complaint with us:
Changes to This Notice
We reserve the right to change this notice and to make the revised notice effective for health information we already have about you as well as any information we receive in the future. The current notice will be posted on our website and available at our facilities.
Contact Information
For more information about this notice or to exercise your rights, please contact our Privacy Officer: