HIPAA Notice of Privacy Practices

Your Information. Your Rights. Our Responsibilities.

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully. R2 Medical Clinic is required by law to maintain the privacy of your protected health information (PHI), provide you with this notice of our legal duties and privacy practices, and follow the terms of the notice currently in effect.

How We May Use & Disclose Your Health Information

We may use and disclose your protected health information for the following purposes:

• Treatment: We may use your PHI to provide, coordinate, or manage your healthcare and related services. For example, sharing your information with a laboratory performing blood work, a compounding pharmacy preparing your medication, or a specialist involved in your care.
• Payment: We may use and disclose your PHI to bill and collect payment for the services provided to you. This may include providing information to your health insurance plan, if applicable, for coverage determination and reimbursement.
• Healthcare Operations: We may use your PHI to support our business activities, including quality assessment, staff training, compliance activities, and audits.
• Appointment Reminders: We may contact you to remind you of scheduled appointments via phone, text message, or email.
• Treatment Alternatives: We may contact you to inform you about treatment options or health-related services that may be of interest to you.

Other Permitted Disclosures

We may also disclose your PHI without your authorization in the following situations as permitted or required by law:

• When required by federal, state, or local law
• For public health activities (disease prevention, reporting adverse reactions)
• To report suspected abuse, neglect, or domestic violence
• To the FDA for product safety monitoring
• For health oversight activities (audits, investigations)
• In response to a court order or subpoena
• To law enforcement under specific legal circumstances
• To coroners, funeral directors, or organ procurement organizations
• For specialized government functions (military, national security)
• For workers' compensation as required by law

Uses Requiring Your Authorization

For uses and disclosures not described in this notice, we will request your written authorization before using or sharing your PHI. This includes the use of PHI for marketing purposes, sale of PHI, and most uses of psychotherapy notes. You may revoke your authorization at any time in writing, and we will stop using your information for the specified purpose, except where we have already acted in reliance on your authorization.

Your Rights Regarding Your Health Information

• Right to Inspect and Copy: You have the right to inspect and obtain a copy of your medical records and billing records. We may charge a reasonable fee for copies.
• Right to Amend: If you believe your health information is incorrect or incomplete, you may request an amendment. We may deny your request under certain circumstances but will provide a written explanation.
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI, excluding disclosures for treatment, payment, and healthcare operations.
• Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI. While we are not required to agree to all restrictions, we must comply if you pay for a service in full out of pocket and request that we not disclose that information to your health plan.
• Right to Request Confidential Communications: You may request that we communicate with you in a specific way or at a specific location (e.g., only by mail to a certain address).
• Right to a Paper Copy: You have the right to obtain a paper copy of this notice upon request, even if you have agreed to receive it electronically.
• Right to Be Notified of a Breach: You have the right to be notified if there is a breach of your unsecured protected health information.

Our Responsibilities

• We are required by law to maintain the privacy and security of your PHI
• We will promptly notify you if a breach occurs that may have compromised your PHI
• We will not use or share your information other than as described in this notice without your written permission
• We will not use your information for marketing purposes or sell your information without your authorization

Filing a Complaint

If you believe your privacy rights have been violated, you may file a complaint with R2 Medical Clinic or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Contact Our Privacy Officer

For questions about this notice, to exercise your rights, or to file a complaint, please contact: