HIPAA Notice of Privacy Practices

Effective [EFFECTIVE DATE]

This is a working draft for review. Bracketed [PLACEHOLDERS] must be completed and the full text reviewed by a licensed healthcare attorney before this page is published.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

1. Our Commitment to Your Privacy

[LEGAL ENTITY NAME], doing business as Y-Factor Health, is required by law to maintain the privacy of your Protected Health Information (PHI), to provide you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect.

2. How We May Use and Disclose Your PHI

• Treatment: to collect, analyze, and report your test results and coordinate with providers involved in your care.
• Payment: to bill and obtain payment for services from you or, where applicable, your insurer.
• Healthcare Operations: to run and improve our services, quality, and administration.

3. Other Permitted Uses and Disclosures

We may use or disclose PHI as required by law and for public health activities, health oversight, legal proceedings, law enforcement, and to avert a serious threat to health or safety, in accordance with applicable law.

4. Uses and Disclosures Requiring Your Authorization

Most uses and disclosures not described in this Notice — including marketing and any sale of PHI — will be made only with your written authorization, which you may revoke at any time.

5. Your Rights Regarding Your PHI

• Inspect and obtain a copy of your PHI.
• Request an amendment of your PHI.
• Request an accounting of certain disclosures.
• Request restrictions on certain uses and disclosures.
• Request confidential communications by alternative means or location.
• Obtain a paper copy of this Notice on request.
• Be notified in the event of a breach of unsecured PHI.

6. Our Responsibilities

We are required to maintain the privacy and security of your PHI, notify you following a breach of unsecured PHI, and abide by the terms of this Notice while it is in effect.

7. Changes to This Notice

We may change this Notice and make the revised Notice effective for all PHI we maintain. The current Notice will be posted on this website.

8. Complaints

If you believe your privacy rights have been violated, you may contact our Privacy Officer, [PRIVACY OFFICER NAME], at hello@y-factorhealth.com, or file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be penalized for filing a complaint.

9. Contact

Privacy Officer: [PRIVACY OFFICER NAME]  ·  hello@y-factorhealth.com  ·  [BUSINESS MAILING ADDRESS]