Note of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE READ IT CAREFULLY.

We care about our clients' privacy and strive to protect the confidentiality of your medical information at this facility. Federal legislation known as the "HIPAA Privacy Rule," requires that we provide detailed notice in writing of our privacy practices. We know this Notice is long. The HIPAA Privacy Rule requires us to address many specific things in this Notice. This facility is required to abide by the terms of the Notice of Privacy Practices currently in effect and to provide notice of its legal duties and privacy practices with respect to protected health information.

I. OUR COMMITMENT TO PROTECTING HEALTH INFORMATION ABOUT YOU.

In this Notice, we describe the ways that we may use and disclose health information about our clients. The HIPAA Privacy Rule requires that we protect the privacy of health information that identifies a client, or where there is a reasonable basis to believe the information can be used to identify a client. This information is called "protected health information" or "PHI." This Notice describes your rights as our client and our obligations regarding the use and disclosure of PHI. We are required by law to:

• Maintain the privacy of PHI about you;
• Give you this Notice of our legal duties and privacy practices with respect to PHI; and
• Comply with the terms of our Notice of Privacy Practices that is currently in effect.

We reserve the right to make changes to this Notice and to make such changes effective for all PHI we may already have about you. If and when this Notice is changed, we will post a copy in our office in a permanent location. We will also provide you with a copy of the revised Notice upon your request made to our Privacy Officer.

II. HOW WE MAY USE AND DISCLOSE PROTECTED HEALTH INFORMATION ABOUT YOU

Uses and Disclosures for Treatment, Payment, and Health Care Operations

The following categories describe the different ways we may use and disclose PHI for treatment, payment, or health care operations. The examples included with each category do not list every type of use or disclosure that may fall within that category.

Treatment: We may use and disclose PHI about you to provide, coordinate or manage your health care and related services. We may consult with other health care providers regarding your treatment and coordinate and manage your health care with others. For example, we may use and disclose PHI when you need a prescription, lab work, or other health care services.

Payment: We may use and disclose PHI so that we can bill and collect payment for the treatment and services provided to you. Before providing treatment or services, we may share details with your health plan concerning the services you are scheduled to receive. We may use and disclose PHI for billing, claims management, and collection coverage. We may disclose PHI to insurance companies providing you with additional coverage. We may disclose limited PHI to consumer reporting agencies relating to collection of payments owed us.

We may also disclose PHI to another health care provider or to a company health plan required to comply with the HIPAA Privacy Rule for the payment of that health care provider, company, or health plan. For example, we may allow a health insurance company to review PHI for the insurance company's activities to determine the insurance benefits to be paid for your care.

Health Care Operations: We may use and disclose PHI in performing business activities which are called health care operations. Health care operations include doing things that allow us to improve the quality of care we provide and to reduce health care costs. We may use PHI about you in the following health care operations:

• Reviewing and improving the quality, efficiency and cost of care that we provide to our clients.
• Cooperating with various people who review our activities. For example, PHI may be seen by doctors reviewing the services provided to you, and by accountants, lawyers, and others who assist us in complying with the law and managing our business.
• Assisting us in making plans for our facility's future operations.
• Resolving grievances within our facility.
• Business planning and development, such as cost-management analyses.
• Business management and general administrative activities or our facility, including managing our activities related to complying with the HIPAA Privacy Rule and other legal requirements.
• Creating "de-identified" information that is not identifiable to any individual.

If another health care provider, company, or health plan that is required to comply with the HIPAA Privacy Rule has or once had a relationship with you, we may disclose PHI about you for certain health care operations of that health care provider or company.

Communication from Our Office: We may contact you to remind you of future or missed appointments, the need for an appointment, questions regarding prescription refills or other business matters. We will make a reasonable effort not to leave detailed information on voice mail or answering machines unless specifically requested to do so. In the case of an emergency, particularly when responding to an emergency page from a client, the doctor may call the client from a cell phone. Doctor and client alike must recognize the inherent privacy risks with the use of cell phones over landlines.

OTHER USES AND DISCLOSURES CAN BE MADE WITHOUT YOUR WRITTEN AUTHORIZATION

Uses and Disclosures for Which You Have the Opportunity to Agree or Object

We may use and disclose PHI about you in some situations where you have the opportunity to agree or object to certain uses and disclosures of PHI about you. If you do not object, then we may make these types of disclosure of PHI.

Individuals Involved in Your Care or Payment for Your Care: We may disclose PHI about you to your family member, close friend, or any other person identified by you if that information is directly relevant to the person's involvement in your care or payment for your care. If you are present and able to consent or object (or if you are available in advance), then we may only use or disclose PHI if you do not object after you have been informed of your opportunity to object. If you are not present or you are unable to consent or object, we may exercise professional judgment in determining whether the use or disclosure of PHI is in your best interests. For example, if you are brought into this office and are unable to communicate normally with your doctor for some reason, we may find it is in your best interest to give your prescription and other medical supplies to the friend or relative who brought you in for treatment. We may also use and disclose PHI to notify such persons or your location, general condition, or death. We also may coordinate with disaster relief agencies to make this type of notification. We also may use professional judgment and our experience with common practice to make reasonable decisions about your best interests in allowing a person to act on your behalf to pick up filled prescriptions, medical supplies, or other things that contain PHI about you.

OTHER USES AND DISCLOSURE WE CAN MAKE WITHOUT YOUR WRITTEN AUTHORIZATION OR OPPORTUNITY TO AGREE OR OBJECT

We may use and disclose PHI about you in the following circumstances without your authorization or opportunity to agree or object, provided that we comply with certain conditions that may apply.

Required by Law: We may use and disclose PHI as required by federal, state, or local law. Any disclosure complies with the law and is limited to the requirements of the law.

Public Health Activities: We may use or disclose PHI to public health authorities or other authorized persons to carry out certain activities related to public health:

• To prevent or control disease, injury, or disability;
• To report disease, injury, birth, or death;
• To report child abuse or neglect;
• To report reactions to medications or problems with products or devices regulated by the Food and Drug Administration or other activities relation to quality, safety, or effectiveness of FDA-regulated products or activities;
• To locate and notify persons of recalls of products they may be using;
• To report to your employer, under limited circumstances, information related primarily to workplace injuries or illness, or workplace medical surveillance.

Abuse, Neglect, or Domestic Violence: We may disclose PHI in certain cases to proper government authorities if we reasonably believe that a client has been a victim of domestic violence, abuse, or neglect.

Health Oversight Activities: We may disclose PHI to a health oversight agency for oversight activities including, for example, audits, investigations, inspections, licensure and disciplinary activities and other activities conducted by health oversight agencies to monitor the health care system, government health care programs, and compliance with certain laws.

Lawsuits and Other Legal Proceedings: We may use or disclose PHI when required by court or administrative tribunal order. We may also disclose PHI in response to subpoenas, discovery requests, or other required legal process when efforts have been made to advise you of the request or to obtain an order protecting the information requested.

Law Enforcement: Under certain conditions, we may disclose PHI to law enforcement officials for the following purposes where the disclosure is:

• About a suspected crime victim if, under certain limited circumstances, we are unable to obtain a person's agreement because of incapacity or emergency;
• To alert law enforcement of a death that we suspect was the result of criminal conduct;
• Required by law;
• In response to a court order, warrant, subpoena, summons, administrative agency request, or other authorized process;
• To identify or locate a suspect, fugitive, material witness, or missing person;
• About a crime or suspected crime committed at our office; or
• In response to a medical emergency not occurring at the office, if necessary to report a crime, including the nature of the crime, the location of the crime or the victim, and the identity of the person who committed the crime.

Coroners, Medical Examiners, Funeral Directors: We may disclose PHI to a coroner or medical examiner to identify a deceased person and determine the cause of death. In addition, we may disclose PHI to funeral directors, as authorized by law, so that they may carry out their jobs.

To Avert a Serious Threat to Health or Safety: We may use or disclose PHI about you in limited circumstances when necessary to prevent a threat to the health or safety of a person or to the public. This disclosure can only be made to persons who are able to help prevent the threat.

Specialized Government Functions: Under certain circumstances we may disclose PHI:

• For certain military and veteran activities, including determination of eligibility for veterans for veterans' benefits where deemed necessary by military command authorities;
• For national security and intelligence activities;
• To help provide protective services for the president and others;

Disclosures required by the HIPAA Privacy Rule: We are required to disclose PHI to the Secretary of the United States Department of Health and Human Services when requested by the Secretary to review our compliance with the HIPAA Privacy Rule. We are also required in certain cases to disclose PHI about you upon your request to access PHI or for an accounting of certain disclosures of PHI about you (those requests are described in Section III of this Notice).

OTHER USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION REQUIRE YOUR AUTHORIZATION

Workers' Compensation: We may disclose PHI as authorized by workers' compensation laws or other similar programs that provide benefits for work-related injuries or illness.

OTHER USES AND DISCLOSURES OF PROTECTED HEALTH INFORMATION REQUIRE YOUR AUTHORIZATION

All other uses and disclosures of PHI about you will only be made with your written authorization. If you have authorized us to use or disclose PHI about you, you may revoke your authorization at any time, except to the extent we have taken action based on the authorization.

III. YOUR RIGHTS REGARDING PROTECTED HEALTH INFORMATION ABOUT YOU

Under federal law, you have the following rights regarding PHI about you:

Right to Request Restrictions: You have the right to request additional restrictions on the PHI that we may use for treatment, payment and health care operations. You may also request additional restrictions on our disclosure of PHI to certain individuals involved in your care that otherwise are permitted by the Privacy Rule. We are not required to agree to your request. If we do agree to your request, we are required to comply without agreement except in certain cases, including where the information is needed to treat you in the case of an emergency. To request restrictions, you must make your request in writing to our Privacy Officer. In your request, please include (l)the information you want to restrict; (2) how you want to restrict the information (for example, restricting use to this office, only restricting disclosure to persons outside this office, or restricting both); and (3) to whom you want those restrictions apply.

Right to Receive Confidential Communications: You have the right to request that you receive communications regarding PHI in a certain manner or at a certain location. For example, you may request that we contact you at home, rather than at work. You must make your request in writing to our Privacy Officer. You must specify how you would like to be contacted (for example, by regular mail to your post office box and not your home). We are required to accommodate reasonable requests and will deny only those requests which pose an unreasonable burden on the facility.

Right to Inspect and Copy: You have the right to request the opportunity to inspect and receive a copy of PHI about you in certain records that we maintain. This includes your medical and billing records but does not include psychotherapy notes or information gathered or prepared for a civil, criminal, or administrative proceeding. We may deny your request to inspect and copy PHI only in limited circumstances. To inspect and copy PHI please contact our Privacy Officer. If you request a copy of PHI about you, we may charge you a reasonable fee for the copying, postage, labor and supplies used in meeting your request.

Right to Amend: You have the right to request that we amend PHI about you as long as such information is kept by or for our office. If you feel that medical information we have about you is incorrect or incomplete, you may ask us to amend the information. You have the right to request an amendment for as long as the information is kept. To request an amendment, your request must be made in writing and submitted to the Privacy Officer at this facility. You must also give us a reason for your request. We may deny your request in certain cases, including if it is not in writing, if you do not give us a reason for the request, or if the information was not created by us, is not part of the medical information kept at this facility, is not part of the information which you would be permitted to inspect and copy, or which we deem accurate and complete. If we deny your request for amendment, you have the right to file a statement of disagreement with us. We may prepare a rebuttal to your statement and will provide you with a copy of any such rebuttal. Statements of disagreement and any corresponding rebuttals will be kept on file and sent out with any future authorized requests for information pertaining to the appropriate portion of your record.

Right to Receive an Accounting of Non-Standard Disclosures: You have the right to request an "accounting" of certain disclosures that we have made of PHI about you. This is a list of disclosures made by us during a specified period of up to six years other than nonstandard disclosures made: for treatment, payment, and health care operations; for use in or related to a facility directory; to family members or friends involved in your care; to you directly; pursuant to an authorization of you or your personal representative, or for certain notification purposes (including national security, intelligence, correctional, and law enforcement purposes) and disclosures made before April 14,2003. If you wish to make such a request, please contact our Privacy Officer identified on the last page of this Notice. The first list that you request in a 12-month period will be free, but we may charge you for our reasonable costs of providing additional lists in the same 12-month period. We will tell you about these costs, and you may choose to cancel your request at any time before costs are incurred.

Right to a Paper Copy of this Notice: You have a right to receive a paper copy of this Notice at any time. You are entitled to a paper copy of this Notice even if you have previously agreed to receive this Notice electronically. To obtain a paper copy of this Notice, please contact our Privacy Officer listed on the last page of this Notice.

IV. COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer at the address and number listed below. You will not be penalized or discriminated against for filing a complaint. If you are not satisfied with the manner in which this office handles your complaint, you may submit a formal complaint to:

Secretary, Department of Health and Human Services
Office of Civil Rights
200 Independence Avenue, SW
Washington, D.C. 20201

V. CHANGES TO THIS NOTICE

We reserve the right to change this Notice. We reserve the right to make the revised or changed Notice effective for medical information we already have about you as well as any information we receive in the future. We will post a copy of the current Notice, with the effective date displayed clearly on the front page.

VI. QUESTIONS

If you have any questions regarding this Notice, please contact our Privacy Officer at the number listed below.

VII. PRIVACY OFFICER CONTACT INFORMATION

You may contact Balance Treatment Center's Privacy Officer at (818) 880-0800 This Notice was published and first became effective on April 14, 2003.