THIS NOTICE DESCRIBES HOW MEDICAL AND CLINICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
At Triad Recovery Center, we are committed to maintaining the confidentiality of your personal and clinical records. We are required by federal law (under the Health Insurance Portability and Accountability Act of 1996 – HIPAA, and the Confidentiality of Substance Use Disorder Patient Records – 42 CFR Part 2) to safeguard the privacy of your Protected Health Information (PHI) and provide you with this comprehensive description of our legal duties and privacy practices.
1. Stricter Federal Protection: 42 CFR Part 2
Because Triad Recovery Center is a specialized substance use disorder treatment program, federal law protects your confidentiality under **42 CFR Part 2** in addition to standard HIPAA rules. These federal regulations are stricter than standard medical privacy rules: we generally cannot disclose to anyone outside our center that you are in treatment here, nor share any records identifying you as having a substance use disorder, without your signed, written Release of Information (ROI).
The only exceptions where we may disclose PHI under 42 CFR Part 2 without your written authorization are:
- In a medical emergency requiring immediate life-saving treatment by external emergency professionals.
- To qualified personnel for internal research, audit, or program evaluation.
- Under a specialized court order issued in compliance with 42 CFR Part 2 regulations (which requires specific legal findings beyond a standard subpoena).
- To report child abuse or neglect as mandated by North Carolina state law (Part 2 does not protect against reporting child abuse, though it prohibits disclosing clinical records for prosecution unless a court order is obtained).
2. How We May Use and Disclose Your Health Information
Subject to the strict guidelines of Part 2, we may use and disclose your PHI for the following purposes:
A. For Treatment:
We may use and share your health records within our facility among therapists, clinical coordinators, medical directors, and psychiatric staff to coordinate your rehabilitation plan, therapy schedules, and clinical progress assessments.
B. For Payment:
With your written consent, we disclose key diagnosis and treatment details to your health insurance provider to verify outpatient care benefits, submit claims, secure pre-authorizations, and process payments for the services you receive.
C. For Healthcare Operations:
We may use clinical records internally to monitor the quality of our outpatient care, audit program outcomes, train clinicians, and maintain licensing and Joint Commission accreditation standards.
D. Internal Communications (QSOA):
We may share details with a **Qualified Service Organization** or under a **Business Associate Agreement** (such as legal counsel, IT services, or external billing entities) that has signed a strict binding contract agreeing to protect your PHI and adhere strictly to 42 CFR Part 2 and HIPAA privacy rules.
3. Uses and Disclosures Requiring Your Explicit Signed Release
Any other disclosures of your PHI not described in this Notice will be made only with your explicit, written Release of Information. This includes sharing details with family members, employers, courts, or probation officers. You may revoke a Release of Information in writing at any time, except to the extent that we have already acted in reliance on it.
4. Your Legal Rights Regarding Your Health Information
You hold the following rights regarding the PHI we maintain about you:
- Right to Inspect and Copy: You have the right to request access to, inspect, and receive a physical or electronic copy of your medical and billing records. We may charge a reasonable, cost-based fee for copying and mailing.
- Right to Request Restrictions: You may request that we restrict how we use or share your PHI. While we will review all requests, we are not legally bound to agree to every restriction. However, if you pay for treatment entirely out-of-pocket, you have the right to restrict disclosures to your health insurance provider.
- Right to Confidential Communications: You may request that we contact you via alternative methods (e.g. only calling a specific phone number or mailing to a P.O. Box) to protect your privacy.
- Right to Amend: If you believe clinical or billing details in your record are inaccurate or incomplete, you may submit a written request to amend your file.
- Right to an Accounting of Disclosures: You have the right to request a list of certain disclosures we have made of your PHI for purposes other than treatment, payment, or operations.
- Right to a Paper Copy: You have the right to receive a printed, paper copy of this Notice at any time, even if you previously agreed to receive it electronically.
5. Our Duties
Triad Recovery Center is legally required to:
- Maintain the absolute privacy and security of your Protected Health Information.
- Provide you with this Notice detailing our legal duties and privacy practices.
- Abide by the terms of the Notice currently in effect.
- Notify you promptly in the event that a breach occurs that compromises the privacy or security of your unsecured health records.
6. How to File a Complaint
If you believe your privacy rights have been violated, you may file a formal complaint with Triad Recovery Center’s HIPAA Officer or with the Secretary of the U.S. Department of Health and Human Services (HHS). We will not retaliate or penalize you in any way for filing a complaint.
7. HIPAA Contact Information
To exercise any of your rights, submit an inquiry, or file a complaint regarding our medical privacy practices, please contact our HIPAA Privacy Officer:
HIPAA Privacy & Part 2 Compliance Officer
Triad Recovery Center
150 Charlois Blvd. Suite 300
Winston-Salem, NC 27103
Phone: (336) 203-9033
Email: hipaa@triadrecovery.org