HIPAA NOTICE OF PRIVACY PRACTICES

This Notice explains how Yulia Fox, LMFT (“the Practice”) may use and disclose your protected health information ("PHI") and the rights you have regarding your health information.

Your Privacy

The Practice is required by law to protect the privacy and security of your PHI and to provide you with this Notice. The Practice will follow the terms of this Notice. If the Notice is changed, the updated version will be available on the Practice's website and upon request. If a breach of unsecured PHI occurs, the Practice will notify you as required by law. Except when permitted or required by law, the Practice will use or disclose your PHI only with your written authorization. You may revoke an authorization in writing, except to the extent action has already been taken based on it.

How the Practice May Use or Disclose Your PHI

The Practice may use or disclose your PHI without written authorization when permitted or required by law, including for:

Treatment: to provide, coordinate, or manage your care, including communicating with other health care professionals involved in your treatment.
Payment: to bill and collect payment for services, including communicating with your health insurance plan when applicable.
Health Care Operations: to manage, administer, and improve the Practice and comply with legal requirements.
Appointments and Services: to send appointment reminders and provide information about treatment options or health-related services offered by the Practice.
Public Health and Safety: for certain public health activities, reporting abuse or neglect when required, or preventing a serious threat to health or safety.
Legal and Government Matters: when permitted or required by law for certain court proceedings, law enforcement, health oversight, workers' compensation, research, or government functions.

Psychotherapy Notes

The Practice maintains psychotherapy notes as defined by HIPAA. These notes receive special protection and generally require your written authorization before they may be used or disclosed. HIPAA allows limited exceptions, including certain treatment, training or supervision, legal, oversight, and safety purposes.

Marketing and Sale of PHI

The Practice will not use or disclose your PHI for marketing when your authorization is required. The Practice will not sell your PHI without your authorization when authorization is required by law.

California Privacy Protections

The Practice complies with applicable California privacy laws, which may provide additional protections for certain health information. Depending on the circumstances, these protections may apply to information concerning treatment of minors, immigration status or place of birth, reproductive health care, and gender-affirming care.

Substance Use Disorder Records

If the Practice maintains substance use disorder treatment records that are subject to 42 CFR Part 2, those records may have additional federal privacy protections. Part 2 may restrict the use or disclosure of those records in certain civil, criminal, administrative, or legislative proceedings against a client without the client's written consent or a qualifying court order accompanied by a subpoena. This applies only to records that are subject to 42 CFR Part 2. It does not mean that all PHI maintained by the Practice is protected under Part 2.

Family, Friends, and Others

With your agreement, the Practice may share limited PHI with a family member, friend, or another person you identify as being involved in your care or payment for your care. In certain emergency situations, information may be shared when permitted by law.

Your Rights

You have the right to:

Request restrictions on how the Practice uses or discloses your PHI.
Request restrictions on certain disclosures to your health plan when you have paid for a service completely out-of-pocket.
Request confidential communications in a specific way or at a specific location.
Access and receive a copy of your PHI, subject to legal exceptions, including psychotherapy notes.
Request correction of information you believe is inaccurate or incomplete.
Request an accounting of certain disclosures of your PHI.
Receive a paper or electronic copy of this Notice.

Written Authorization

When your written authorization is required, you may revoke it in writing. Revocation does not affect information already used or disclosed based on the authorization.