HIPAA Policy

Introduction

Skypoint Recovery is dedicated to maintaining the privacy and security of protected health information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state laws.

This policy applies to all PHI we handle in the course of providing substance use disorder and mental health treatment services.

Federal confidentiality rules for substance use disorder treatment records (42 CFR Part 2) may provide additional protections where they apply.

How we use and disclose your health information

We may use and disclose your PHI in the following ways.

• Treatment. We may use and disclose PHI for treatment activities. This includes sharing information with other healthcare providers involved in your care.
• Payment. We may use and disclose PHI for payment purposes, such as billing your insurance.
• Healthcare operations. We use PHI for healthcare operations, including quality assessment, training, accreditation, and certification activities.
• Uses that require your authorization. For uses and disclosures beyond treatment, payment, and healthcare operations, we obtain your written authorization, except where otherwise permitted or required by law.
• Mental health and substance use information. Special protections may apply to certain mental health and substance use disorder treatment information. Where they apply, we adhere to them strictly.

Your rights

You have the following rights regarding your PHI.

• Access. You have the right to inspect and obtain a copy of your PHI.
• Amendment. You may request an amendment to your PHI if you believe it is incorrect or incomplete.
• Accounting of disclosures. You have the right to request an accounting of certain disclosures of your PHI.
• Restrictions and confidential communications. You may request restrictions on how we use and disclose your PHI, and on how we communicate with you.
• Complaints. You have the right to file a complaint if you believe your privacy rights have been violated.

Our responsibilities

Skypoint Recovery has the following responsibilities regarding your PHI.

• Privacy. We are committed to maintaining the privacy of your PHI.
• Notice. We provide notice of our legal duties and privacy practices regarding PHI.
• Adherence. We abide by the terms of this policy.
• Breach notification. We will notify you if there is a breach of your unsecured PHI.
• Changes. We reserve the right to change the terms of this policy and to make the new provisions effective for all PHI we maintain.

Changes to this notice

We reserve the right to change this notice. The current notice will always be posted on our website.

Questions or complaints

For questions or more information about this policy, contact Skypoint Recovery and ask for our Privacy Officer.

If you believe your privacy rights have been violated, you can file a complaint with our Privacy Officer. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

How to reach us