At Novara Recovery Center, we dedicate ourselves to protecting your health information. We follow HIPAA rules to keep your personal data safe and private. Your trust matters to us, which is why we follow rigorous standards to maintain your privacy at every step of care.
At Novara Recovery Center, we are dedicated to safeguarding your privacy and maintaining the confidentiality of your Protected Health Information (PHI). This Privacy Policy explains how we collect, use, share, and protect your PHI. We follow all federal, state, and local laws. This includes the Health Insurance Portability and Accountability Act (HIPAA) and other privacy rules.
This policy applies to all employees, contractors, and business partners. It includes anyone who may access your health information while working at Novara Recovery Center. It also applies to any information collected through digital platforms, including electronic health records (EHR).
We collect personal and health-related information necessary to provide treatment and services, including:
We also collect non-health-related information necessary for administrative purposes, including employee and visitor records, which may also be protected under confidentiality agreements.
We use your personal and health information for several important purposes:
Your PHI may be disclosed under the following circumstances:
We may share your PHI with employees or contractors. They help with your treatment and important tasks like billing and quality checks. All personnel handling PHI are trained on confidentiality requirements and adhere to strict security protocols.
We may share your PHI with third-party service providers or contractors. This includes billing companies and IT services that help us. These associates are required to comply with the same privacy standards as we do.
We may share your confidential medical data with other healthcare providers involved in your care. This includes hospitals, specialists, and insurance companies. We do this to coordinate your treatment, process claims, and perform necessary administrative tasks.
We may disclose your information without your consent in certain legal circumstances, including but not limited to:
Research and Evaluation
We can use and share PHI for research if the research is approved by an Institutional Review Board (IRB) and follows HIPAA privacy rules. In such cases, your identity will remain protected unless explicit consent is obtained.
Among your rights with respect to your protected health information are:
You may request access to and a copy of your PHI that we maintain. We may charge a reasonable fee for this service. You may also request a copy in electronic format if it is available.
If you believe that the PHI we maintain about you is incorrect or incomplete, you have the right to request an amendment. We will review your request and make amendments when appropriate.
You have the right to ask for a detailed report of who has accessed your protected health information. This request should cover a reasonable time period. This accounting will show when and why your information was shared. It does not include details for treatment, payment, or healthcare operations, or if you gave permission.
You can ask us to limit how we use or share your protected health information. This includes treatment, payment, or healthcare operations. While we are not obligated to agree to all restrictions, we will honor reasonable requests where possible.
You can ask us to contact you in a certain way, like by mail or email. You can also request a different location, such as your workplace or another private address. We will do our best to meet your request.
In case you feel that your privacy rights have been infringed, you have the right to file a complaint. You can send this complaint to us or to the U.S. Department of Health and Human Services (HHS). It will not lead to any retaliation against you in any form.
We will retain your data for no longer than is necessary to fulfill the purpose for which it was collected. After we finish that purpose, we will safely dispose of the personal data. We will keep it longer only if required by law, regulations, or accounting rules. We may also keep it to protect our legitimate interests.
If we detect a breach involving your unprotected health information, we will notify you promptly and without unnecessary delay. Our notification will include the following:
We take strong measures to protect your PHI. We use different safeguards to protect your information.
These include physical, administrative, and technical measures. They help prevent unauthorized access, destruction, disclosure, or changes to your data. These safeguards include encryption, secure servers, access controls, and regular staff training.
We take steps to protect your information from unauthorized access. However, we cannot be responsible for access that is beyond our control.
The Novara Recovery Center’s website utilizes cookies to enhance your experience and provide future tools. A cookie is a small text file stored on your browser and hard drive. It helps the website recognize your browser. This allows the site to capture and keep certain information.
The Novara Recovery Center uses cookies for the following purposes:
Before cookies are placed on your computer or device, you may see a dialog box asking for your consent. By consenting to the placement of cookies, you enable us to offer you the best possible experience and service. You may choose to deny consent, though please note that certain features of the website may not function properly or as intended without cookies.
By using the site or clicking the “Accept” button on our Cookie Consent bar, you accept our Cookie Policy.
We may update this Privacy Policy from time to time. Any changes will be posted on our website and will be available upon request. You will be notified if there are significant changes affecting your rights.
We uphold your entitlement to the confidentiality of your Protected Health Information. Should you decide to lodge a complaint with us or the U.S. Department of Health and Human Services, there will be no repercussions against you.
If you feel that your rights have been infringed upon and wish to file a complaint directly with the U.S. Department of Health & Human Services, you can send a formal written grievance to the following address:
U.S. Department of Health & Human Services Office for Civil Rights, 200 Independence Avenue, S.W., Washington, D.C. 20201, or contact them at 877-696-6775, OCRMail@hhs.gov, and visit www.hhs.gov for more information.Protected health information (PHI) includes details that can identify you. It relates to your past, present, or future health. This also covers healthcare services you received and payments for those services.
We must protect the confidentiality of your Protected Health Information (PHI). We will provide you with a notice about our legal duties and privacy practices related to your PHI. If there is a breach involving your unsecured PHI, we will inform you. We are committed to adhering to the stipulations of this Notice of Privacy Practices.
This notification becomes effective on the date indicated on the initial page and will remain valid until it is modified. We need to update this Privacy Practices Notice. This will happen when there are major changes to your rights, our duties, or other practices mentioned in this document.
We can change our privacy policy, practices, and the terms in this Notice of Privacy Practices. We will do this according to the law and our business needs when needed. Any updated Notice of Privacy Practices will be applicable to all PHI we hold at that moment. Notifications regarding changes to this Notice of Privacy Practices will be provided in the following manner:
1. Upon request;
2. Through our website or other digital methods; and
3. Displayed at our business location.
Moreover, we are obligated to address your inquiries (such as those related to your entitlements) promptly and suitably. We respect your privacy rights and are dedicated to upholding reasonable and suitable protections for your Protected Health Information (PHI).
Federal laws and regulations safeguard the privacy of patient records related to alcohol and drug abuse that we maintain. Typically, we are prohibited from revealing any details that identify you as an alcohol or drug abuser without:
1. Your written consent;
2. A judicial order permitting disclosure; or
3. The information is shared with healthcare professionals during a medical crisis or with authorized individuals for research, auditing, or program assessment.
Crimes occur when the treatment center breaches federal laws and regulations. Any suspected breaches can be reported to the relevant authorities as per federal guidelines.
Federal laws and regulations do not safeguard information regarding offenses you commit at the treatment facility or against any staff member of the treatment center, nor do they protect against threats to commit such offenses.
Federal laws and regulations do not prevent the reporting of suspected child abuse or neglect to relevant state or local authorities as required by state law.
Refer to 42 U.S.C. 290dd-3 and 42 U.S.C. 290ee-3 for federal statutes, and consult 42 CFR part 2 for federal regulatory guidelines.
Your Protected Health Information (PHI) might be allowed, mandated, or approved for utilization and sharing. Listed below are the categories outlining the various ways we utilize and share PHI.
At Novara Recovery Center, staff members may share or reveal information among themselves if it is necessary for their responsibilities connected to diagnosing, treating, or referring individuals for treatment of alcohol or drug addiction issues.
This exchange takes place within our treatment facility and serves purposes like delivering care, managing billing, monitoring charges and credits, verifying insurance coverage eligibility, and processing insurance claims. Additionally, we might utilize and share your PHI for our healthcare operations and to carry out tasks related to our business activities, such as accreditation and licensing.
Secretary of Health and Human Services: It is mandatory for us to reveal PHI to the Secretary of the U.S. Department of Health and Human Services when the Secretary conducts an investigation or assesses our adherence to HIPAA Privacy Regulations.
Business Associates: We might share your PHI with Business Associates we have contracted to carry out services for us, which could include receiving, using, or disclosing your PHI. Every Business Associate is required to commit to safeguarding your PHI’s confidentiality, using and disclosing the information solely for the specified purposes, adhering to 42 CFR Part 2, and opposing any efforts to access patient records in legal proceedings unless legally authorized.
Crimes on Site: We might share details about offenses occurring on our property or targeting our staff, or threats thereof, with law enforcement authorities.
Reporting Suspected Child Abuse and Neglect: We are permitted to share necessary information for reporting suspected child abuse and neglect as mandated by state law with the relevant state or local agencies. Nonetheless, original patient records cannot be disclosed in civil or criminal cases related to these reports without obtaining consent.
Judicial Directive: We might release information mandated by a court order, given specific regulatory conditions are satisfied.
In urgent cases: We might share details with healthcare professionals to provide emergency treatment.
Research: Your information may be utilized and shared for research purposes if specific conditions are satisfied, like approval from an Institutional Review Board.
Audit and Evaluation Tasks: We might share your data with individuals performing audit and evaluation tasks, as long as they consent to specific limitations on data sharing.
Reporting Cause of Death: We might share details concerning the cause of death with a sanctioned public health agency.
Besides the situations mentioned earlier, we will refrain from using or sharing your PHI without your explicit written consent. We will not utilize or disclose psychotherapy notes, use or share your PHI for marketing, or sell your PHI unless you have provided signed consent.
You or your designated representative have the right to revoke this authorization in writing at any moment to stop future uses or disclosures. We will honor verbal revocations after confirming your identity until we receive a written one. Your revocation will not impact any uses or disclosures allowed by your authorization while it was active.
You possess multiple rights concerning the PHI we hold about you. Details on how to exercise these rights are also included. We are dedicated to safeguarding your PHI, ensuring you can access it when necessary, and helping you comprehend your rights as outlined below.
Right to Notification: You are entitled to sufficient notification regarding how your PHI is used and disclosed, as well as our obligations and responsibilities concerning it. Additionally, you have the right to request this Notice in both paper and electronic formats. You can access this Notice on our website at Novara Recovery Center Mental Health, from our staff, or by requesting it whenever needed.
You are entitled to access, review, and receive a copy of your Protected Health Information (PHI) for as long as we retain it, in accordance with legal requirements. This entitlement may be restricted solely under certain conditions specified by relevant laws.
Every request to access your Personal Health Information (PHI) must be submitted in writing. Occasionally, we might refuse your request, and any such refusal will be communicated to you in writing. If access to your PHI is denied, you may request a review of this decision.
A different licensed healthcare professional selected by Novara Recovery Center will evaluate your request and the denial. This reviewer will not be the individual who originally denied your request. We will adhere to the decision made by the appointed professional.
Should you continue to face denial, you are entitled to request a review by an independent, licensed healthcare expert. We will adhere to the verdict reached by this third-party professional.
We might impose a reasonable fee based on costs for the duplication and/or mailing associated with your request. Should the PHI be stored electronically, you have the option to request a copy in that electronic form and format if it is easily producible; otherwise, we will supply it in any mutually agreed-upon readable form and format, such as a PDF. Additionally, your request can include directions to send the information to another person or organization.
If you believe that the Protected Health Information (PHI) we hold about you is inaccurate or lacking, you are entitled to request a modification to your PHI, provided we still have it. Your request must be submitted in writing, along with a justification for the amendment. There are instances where we might refuse your request, such as when the PHI:
1. Not made by our team;
2. Is not accessible or reviewable according to relevant legislation; or
3. Is precise and thorough.
Should we reject the amendment, we will supply the written reasoning for the denial. If your request is turned down, you have the option to draft a statement of disagreement. This statement will be attached to your PHI and accompany any disclosure. If the amendment is approved, we will work with you to identify and notify other relevant healthcare parties.
We are obligated to establish and keep a record (list) of particular disclosures of your Protected Health Information (PHI). You are entitled to request a copy of this record within a period defined by relevant law prior to the request date (up to six years). Requests for this record must be submitted in writing. We are not legally required to document certain disclosures (such as those made with your signed consent), and these will not be included in the list provided.
Should you request this accounting more than once within a 12-month period, we may impose a reasonable fee based on costs for handling additional requests. We will inform you of any applicable fee at the time of your request.
You possess the right to seek limitations or restrictions on how we utilize and disclose your PHI for treatment, payment, and operational purposes.However, we are not required to comply with these restrictions except in specific situations outlined below. Your request must be submitted in writing.
Should we consent to the limitation, we will adhere to it in the future unless you withdraw it or we determine, using our professional judgment, that an urgent situation requires us to override the restriction to deliver suitable care, or if the use or disclosure is otherwise legally permitted. In exceptional circumstances, we retain the right to terminate a previously agreed-upon restriction, but only after informing you.
If you have personally covered the full cost (meaning you or someone other than your health insurance has paid for your treatment) for a particular item or service, you can ask that your PHI related to that item or service not be shared with a health plan for payment or healthcare operations. We are legally obligated to comply with this request unless you revoke it in writing or when disclosures are mandated by law. This request needs to be submitted in written form.
You have the option to ask us to contact you regarding your PHI and health-related issues through different methods or at different places. This request should be submitted in writing and detail the preferred method or location. We will honor reasonable requests while ensuring the proper protection of your PHI.
You are entitled to be notified if we (or any of our Business Associates) identify a breach involving unsecured PHI.
If you suspect that your privacy rights have been breached, you have the option to submit a written grievance to either us or the U.S. Department of Health and Human Services. Any complaints directed to us must be in writing and sent to our Privacy Official at the address listed below. We assure you that no retaliation will occur for lodging a complaint.
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us:
Novara Recovery Center Virginia Drug & Alcohol Rehab
Compliance Officer
2815 Old Lee Highway Floor 2, Fairfax, VA 22031
We uphold your entitlement to the privacy of your Confidential Health Data. You will not be punished if you decide to file a complaint with us. You also have the option to file a complaint with the U.S. Department of Health and Human Services.
If you believe your rights have been violated, you can file a complaint with the U.S. Department of Health & Human Services. You can send a formal written complaint to the address below:
United States Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
877-696-6775
