Notice of Privacy Practices

Introduction

This notice describes how medical information about you may be used and disclosed, and how you can access this information.

If you receive substance use disorder treatment, additional federal privacy protections may apply under 42 CFR Part 2.

What counts as protected information

Your protected information may include:

• Medical history
• Diagnoses and treatment information
• Medications and prescriptions
• Telemedicine visit information
• Billing and payment information
• Substance use disorder treatment information when applicable

42 CFR Part 2 substance use disorder treatment information

If Blue Rhine Clinic provides substance use disorder diagnosis, treatment, referral, or related services, federal law may provide special confidentiality protections.

Part 2 information generally cannot be disclosed without your written consent except in limited circumstances allowed by law.

How we may use and disclose information with your written consent

When required by HIPAA or 42 CFR Part 2, Blue Rhine Clinic may ask for your written consent before sharing information.

• Coordination with other providers
• Communication with family or support persons
• Records sent to other clinicians
• Insurance, billing, or legal disclosures when authorization is required

Uses and disclosures allowed without your consent

Some disclosures may be allowed or required by law even without written consent, including specific safety, legal, or emergency situations.

Where 42 CFR Part 2 applies, those rules may limit disclosures more strictly than standard HIPAA rules.

Medical emergencies

• Emergency treatment needs
• Immediate safety concerns
• Limited information needed for emergency care

Child abuse, elder abuse, or dependent adult abuse

• Mandatory reporting obligations
• Safety concerns involving vulnerable persons
• Reports required by applicable law

Court orders meeting 42 CFR Part 2 requirements

• Qualified court orders
• Strict legal standards for Part 2 information
• Disclosure limited to what the court order permits

Crimes on clinic premises or against personnel

• Threats or violent conduct
• Crimes against clinic staff
• Information needed for safety or law enforcement response

Qualified service providers (QSPs)

• Service providers supporting clinic operations
• Privacy and confidentiality obligations
• Limited use for contracted services

Audits, evaluations & research

• Program audits
• Quality improvement
• Research when permitted by law and privacy rules

Fatality or death reporting

• Reports required by law
• Medical examiner or coroner matters where applicable

Research — highly restricted

• Only when allowed by law
• Subject to privacy protections
• Limited disclosure where required

Telemedicine privacy protection

Your telemedicine care is delivered through secure systems intended to protect privacy and confidentiality.

• Use a private location for telemedicine visits
• Do not record visits unless explicitly permitted
• Use secure communication channels provided by the clinic
• Protect your patient portal login and personal device access

Your rights under HIPAA and 42 CFR Part 2

You have rights regarding your protected health information and, where applicable, substance use disorder treatment records.

• Access your medical records
• Request amendments to information you believe is incorrect or incomplete
• Request confidential communication methods when reasonable
• Request restrictions on certain uses or disclosures
• Receive a list of certain disclosures as allowed by law
• File a complaint if you believe your privacy rights have been violated

Special 42 CFR Part 2 notice for re-disclosure

Information disclosed to you from records protected by federal confidentiality rules may be protected from further disclosure.

Federal rules restrict unauthorized re-disclosure of substance use disorder treatment information unless permitted by written consent or applicable law.

Changes to this notice

Blue Rhine Clinic may update this notice. Updated versions may be posted on this website.

Questions about this notice?

Contact Blue Rhine Clinic if you have questions about privacy practices, medical records, telemedicine communication, or patient rights.