HIPAA Notice of Privacy Practices

Learn how we safeguard your health data and maintain strict confidentiality in your care.

I. Our Commitment

Your health information is personal, and we are committed to protecting it. We keep a record of the services you receive so we can provide quality care and meet legal requirements.

By law, we are required to:

Keep your Protected Health Information (PHI) private.
Give you this notice of our legal duties and privacy practices.
Follow the terms of the notice currently in effect.
Notify you if a breach occurs that compromises the privacy or security of your PHI.

We may change this notice. The current version is always available on request and on our website.

II. How We May Use and Share Your PHI

We may use or share your PHI without your written authorization for:

Treatment: Coordinating your care, such as consulting with another licensed provider about your evaluation or diagnosis.
Payment: Billing and collecting payment for services.
Health care operations: Running our practice, such as quality improvement.
Appointment reminders: Contacting you about appointments and services.

III. Other Uses Allowed or Required by Law

Within legal limits, we may share PHI without your authorization:

When required by federal, state, or local law
To report suspected abuse or neglect of a child, elder, or dependent adult
To prevent a serious threat to someone’s health or safety
For health oversight, such as audits or inspections
In response to a court order, subpoena, or other legal process
For law enforcement purposes as allowed by law
For specialized government functions, such as military or national security, and for workers’ compensation

IV. Uses That Need Your Written Authorization

We will get your written authorization before using or sharing your PHI for any purpose not listed in this notice. We never sell your PHI or use it for marketing. You may revoke an authorization in writing at any time, except for actions already taken.

V. Family, Friends, and Minors

Unless you object, we may share information with family members or others involved in your care or in paying for it. For clients under 18, a parent or legal guardian generally acts on the client’s behalf, as allowed by state law.

VI. Your Rights

You have the right to:

Request limits on how we use or share your PHI. We are not required to agree, except as described below.
Restrict information to your health plan about services you paid for in full out of pocket.
Ask for confidential communication, such as contact by a specific phone number or email only.
Get a copy of your records, electronic or paper. We will respond within 30 days.
Ask us to correct your records if you believe something is wrong or missing.
Get a list of certain disclosures we made in the past six years.
Get a copy of this notice at any time.

VII. Educational Content (De-Identified)

To support community education, ResilienceADHD may share general insights, composite examples, or fully de-identified stories in articles, social media, or videos. All identifying details, such as names, locations, and specific personal circumstances, are changed or removed. If you prefer that themes from your sessions never be used this way, tell us in writing at any time and we will honor your request.

VIII. Questions and Complaints

If you have questions or believe your privacy rights were violated, contact: Liz Rau, Practice Administrator, ResilienceADHD liz@resilienceadhd.com

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr/complaints. We will not retaliate against you for filing a complaint.

Effective Date: September 2026
(Required by Federal Law)