Notice of Privacy Practices

Effective Date:

This Notice of Privacy Practices is effective as of February 16, 2026.

What is this?

This notice describes how medical information about you may be used and disclosed by Hale County Healthcare Authority and/or its affiliates, and how you can get access to this information. Please review it carefully.

Our Duties Regarding Your Health Information

Hale County Healthcare Authority and its affiliates are required by law to:

• Maintain the privacy of your protected health information (PHI).

• Provide you with this Notice of Privacy Practices.

• Follow the terms of the notice currently in effect.

• Notify you if a breach occurs that may compromise the privacy or security of your information.

Note: We reserve the right to change this Notice and make the revised notice effective for information we already have about you as well as any information we receive in the future. The current notice is available upon request, posted in our facilities, and on our website.

How We May Use and disclose your health information

We may use and disclose your health information for the following purposes without your authorization, as permitted by law:

Treatment

We may use or disclose your health information to doctors, nurses, technicians, students, or other healthcare professionals involved in your care, including disclosures to other healthcare providers for emergency or follow-up care.

Payment

We may use and disclose your health information to bill and collect payment from health plans, insurance companies, or other third parties for services provided to you.

Healthcare Operations

We may use and disclose your health information for healthcare operations, including quality assessment, training, accreditation, licensing, credentialing, and business planning.

Appointment Reminders and Health-Related Communications

We may contact you to remind you of appointments or provide information about treatment alternatives or other health-related benefits and services.

Public Health and Safety

We may disclose your health information to public health authorities for purposes such as reporting communicable diseases, adverse events related to products or medications, or to prevent or reduce a serious threat to health or safety.

Abuse, Neglect, or Domestic Violence

We may disclose your health information to appropriate authorities if we reasonably believe you are a victim of abuse, neglect, or domestic violence, as permitted by law.

Law Enforcement and Legal Requirements

We may disclose health information as required by law, court order, subpoena, or other legal process, or to law enforcement officials as permitted by law.

This does not apply to substance use disorder records protected under 42 CFR Part 2, which are subject to additional federal restrictions.

uses and disclosures requiring your Authorization

We will obtain your written authorization before:

• Using or disclosing psychotherapy notes.

• Using or disclosing your health information for marketing purposes.

• Selling your health information.

• Using or disclosing substance use disorder records, except as permitted by law.

You may revoke your authorization at any time in writing, except to the extent action has already been taken.

Special privacy Protections for substance use disorder records

Certain health information related to substance use disorder (SUD) treatment may be protected by federal law under 42 CFR Part 2, in addition to HIPAA.

In general, substance use disorder records may not be used or disclosed without your written consent, except as permitted or required by law.

These records may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless:

• You provide specific written authorization, or

• A court issues an order after you have been notified and given an opportunity to be heard.

The confidentiality protections for substance use disorder records are more stringent than HIPAA and continue to apply even after certain disclosures.

redisclosure notice

Health information disclosed under this Notice of Privacy Practices may be redisclosed by the recipient and may no longer be protected by federal privacy laws.

However, substance use disorder records protected under 42 CFR Part 2 remain subject to federal confidentiality protections even after disclosure.

breach notification

We will notify you following the discovery of a reportable breach of your unsecured health information no later than 60 days from discovery. The notification will include a description of the breach, the information involved, steps you should take to protect yourself, and contact information for additional questions.

Fundraising Communications

We may contact you for fundraising purposes to support our operations. You have the right to opt out of receiving such communications at any time by calling 334-624-3024 ext. 2027 or by following the instructions provided in the fundraising materials.

Substance use disorder records will not be used or disclosed for fundraising purposes without your written authorization.

your rights regarding your health information

You have the right to:

• Request restrictions on certain uses and disclosures of your health information (we may deny requests except where required by law).

• Request confidential communications.

• Inspect and obtain a copy of your health records.

• Request amendments to your health information.

• Receive an accounting of certain disclosures.

• Restrict disclosure of information to your health plan for services paid out-of-pocket in full.

• Obtain a paper or electronic copy of this Notice upon request.

Frequently Asked Questions

  • If you believe your privacy rights have been violated, you may file a complaint without fear of retaliation.

    Contact:

    Compliance Officer

    Hale County Healthcare Authority

    508 Greene Street Greensboro, Alabama 36744

    You may also file a complaint with the U.S. Department of Health and Human Services.

  • For questions about this Notice or your privacy rights, please contact:

    Hale County Healthcare Authority

    Attention: Health Information Management (HIM)

    Phone: 334-624-3024 ext. 2230