HIPAA Notice of Privacy Practices
This practice is committed to protecting the privacy and security of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
This notice describes how your medical information may be used and disclosed, and how you can access that information.
Electronic Health Records
We use a secure, HIPAA-compliant electronic health record system, Sessions Health, for documentation, scheduling, billing, secure messaging, and storage of clinical records.
Information submitted through the secure client portal, intake forms, and scheduling system within Sessions Health is encrypted and maintained in accordance with HIPAA security standards.
Uses and Disclosures of Protected Health Information
Your PHI may be used or disclosed for the following purposes:
Treatment
To provide, coordinate, or manage your mental health care and related services.
Payment
To bill and receive payment for services rendered, including coordination with insurance providers when applicable.
Healthcare Operations
For administrative, quality assurance, supervision, licensing, and practice management activities.
Disclosures Required or Permitted by Law
We may disclose PHI without your written authorization in certain situations permitted or required by law, including but not limited to:
Suspected child, elder, or dependent adult abuse
Risk of serious harm to yourself or others
Court orders or lawful subpoenas
Public health reporting requirements
Compliance with federal, state, or local laws
Uses Requiring Written Authorization
Any use or disclosure of your PHI outside of treatment, payment, healthcare operations, or legally required disclosures will require your written authorization. You may revoke authorization in writing at any time, except to the extent action has already been taken.
Your Rights Under HIPAA
You have the right to:
Inspect and obtain a copy of your clinical record
Request an amendment to your record
Request restrictions on certain uses or disclosures
Request confidential communications
Receive an accounting of certain disclosures
Receive a paper or electronic copy of this Notice
To exercise these rights, please submit a written request using the contact information provided on this website.
Contacting This Practice
If you have questions about this Notice or believe your privacy rights have been violated, you may contact this practice directly. You also have the right to file a complaint with the U.S. Department of Health and Human Services. Filing a complaint will not result in retaliation.
Georgia Mental Health Confidentiality Addendum
In addition to federal protections under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), mental health records in the State of Georgia are afforded additional confidentiality protections under Georgia law, including O.C.G.A. § 37-3-166 and related statutes.
Under Georgia law, the clinical records and identifying information of individuals who seek or receive mental health services are confidential. Such information may not be disclosed except:
With the client’s written authorization
As required or permitted by Georgia law
Pursuant to a valid court order
In situations involving mandatory reporting obligations (e.g., suspected abuse or neglect)
When necessary to prevent a serious and imminent threat to the health or safety of the client or others
As otherwise authorized by state statute
In some instances, Georgia law may provide greater privacy protections than federal HIPAA regulations. When state law is more protective of client privacy, this practice will follow Georgia law.
If you have questions about your rights under Georgia mental health confidentiality laws, please contact this practice directly.