01
Our commitment
Anna Massage Therapy P.C. is committed to protecting the privacy of your health information. We are required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect.
We reserve the right to change our privacy practices and the terms of this notice. If we make a material change, the revised notice will be posted in our office and on this website.
02
How we may use and disclose your information
We may use and disclose your health information for the following purposes without your written authorization:
- —Treatment. To provide, coordinate, and manage your care, including sharing information with other providers involved in it.
- —Payment. To bill and collect payment for services, including submitting claims to your insurer (NYSHIP, Anthem BCBS, HSA/FSA, No-Fault carriers) and verifying coverage.
- —Healthcare operations. Internal administration, quality assurance, training, and the business management needed to run the practice.
- —As required by law. To comply with federal, state, or local law, including reporting to public health authorities and law enforcement where legally required.
- —Research. Under specific conditions and with proper safeguards, de-identified information may be used for research.
03
Specially protected information
Certain categories receive enhanced legal protection. We will not disclose the following for the purpose of investigating or imposing liability without your explicit written authorization:
- —Reproductive healthcare information. Any information relating to reproductive health services you have received.
- —Substance use disorder records. Records relating to diagnosis or treatment of substance use disorders, protected under 42 CFR Part 2.
- —Mental health information. Psychotherapy notes and certain mental health records carry protections beyond standard PHI.
04
Your rights
To exercise any of these rights, submit a written request to our Privacy Officer.
- —Access. Inspect and obtain a copy of the health information we maintain. A reasonable fee may apply for copies.
- —Request restrictions. Ask us to restrict use or disclosure for treatment, payment, or operations. We need not agree, but we are bound by any agreement we make.
- —Request amendment. If you believe your information is incorrect or incomplete, request an amendment. We may deny the request in certain circumstances.
- —Accounting of disclosures. Request a list of certain disclosures made during the six years before your request.
- —Confidential communications. Ask that we contact you in a particular way or at a particular location — by email only, for instance.
- —Revoke authorization. Withdraw a written authorization at any time, in writing.
- —A paper copy of this notice. Available on request at any time, even if you agreed to receive it electronically.
05
Breach notification
In the event of a breach of unsecured protected health information, we will notify you as required by the HIPAA Breach Notification Rule, within 60 days of discovering it. The notice will describe the breach, the types of information involved, the steps you should take to protect yourself, and what we are doing to investigate and prevent a recurrence.
06
Complaints
If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services. We will not retaliate against you for filing one.
- —To complain to us, contact our Privacy Officer below.
- —To complain to HHS, visit hhs.gov/ocr/privacy or call 1-800-368-1019.
07
Text messaging & mobile data
No mobile information is shared with third parties or affiliates for marketing or promotional purposes. All categories above exclude text messaging originator opt-in data and consent; that information is never shared with any third party.