Notice of Privacy Practices

Hale County Healthcare Authority and its affiliates are required by law to:

• Maintain the privacy of your protected health information (PHI).

• Provide you with this Notice of Privacy Practices.

• Follow the terms of the notice currently in effect.

• Notify you if a breach occurs that may compromise the privacy or security of your information.

Note: We reserve the right to change this Notice and make the revised notice effective for information we already have about you as well as any information we receive in the future. The current notice is available upon request, posted in our facilities, and on our website.

We may use and disclose your health information for the following purposes without your authorization, as permitted by law:

1. Treatment

   We may use or disclose your health information to doctors, nurses, technicians, students, or other healthcare professionals involved in your care, including disclosures to other healthcare providers for emergency or follow-up care.

2. Payment

   We may use and disclose your health information to bill and collect payment from health plans, insurance companies, or other third parties for services provided to you.

3. Healthcare Operations

   We may use and disclose your health information for healthcare operations, including quality assessment, training, accreditation, licensing, credentialing, and business planning.

4. Appointment Reminders and Health-Related Communications

   We may contact you to remind you of appointments or provide information about treatment alternatives or other health-related benefits and services.

5. Public Health and Safety

   We may disclose your health information to public health authorities for purposes such as reporting communicable diseases, adverse events related to products or medications, or to prevent or reduce a serious threat to health or safety.

6. Abuse, Neglect, or Domestic Violence

   We may disclose your health information to appropriate authorities if we reasonably believe you are a victim of abuse, neglect, or domestic violence, as permitted by law.

7. Law Enforcement and Legal Requirements

   We may disclose health information as required by law, court order, subpoena, or other legal process, or to law enforcement officials as permitted by law.

This does not apply to substance use disorder records protected under 42 CFR Part 2, which are subject to additional federal restrictions.

We will obtain your written authorization before:

• Using or disclosing psychotherapy notes.

• Using or disclosing your health information for marketing purposes.

• Selling your health information.

• Using or disclosing substance use disorder records, except as permitted by law.

You may revoke your authorization at any time in writing, except to the extent action has already been taken.

Certain health information related to substance use disorder (SUD) treatment may be protected by federal law under 42 CFR Part 2, in addition to HIPAA.

In general, substance use disorder records may not be used or disclosed without your written consent, except as permitted or required by law.

These records may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless:

• You provide specific written authorization

  ‍ ‍OR

• A court issues an order after you have been notified and given an opportunity to be heard.

The confidentiality protections for substance use disorder records are more stringent than HIPAA and continue to apply even after certain disclosures.