HIPAA Notice of Privacy Practices
Last updated July 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY. Effective date: [effective date].
Our commitment
Believe & Achieve Recovery is required by law to maintain the privacy of your protected health information (PHI), to give you this notice of our legal duties and privacy practices, to follow the terms of the notice currently in effect, and to notify you following a breach of unsecured PHI. Because we provide substance use disorder treatment, your records also receive heightened protection under federal law (42 CFR Part 2) and California law.
What is protected health information
PHI is information that identifies you and relates to your past, present or future physical or mental health, the care you receive, or payment for that care.
How we may use and disclose your PHI
We may use and disclose your PHI, consistent with 42 CFR Part 2, for the following purposes:
- Treatment — to provide, coordinate and manage your care among your treatment team and other providers involved in your care.
- Payment — to verify coverage, obtain authorization and bill for services, subject to the additional consent rules that apply to substance use records.
- Health care operations — for quality assessment, training, licensing, accreditation and administrative functions.
Uses and disclosures that require your written authorization
Other uses and disclosures will be made only with your written authorization, which you may revoke at any time in writing (except to the extent we have already acted on it). Authorization is specifically required for:
- Most uses and disclosures of psychotherapy notes.
- Uses and disclosures for marketing.
- Any sale of PHI.
- Most disclosures of substance use disorder records protected by 42 CFR Part 2.
Other permitted or required disclosures
To the extent permitted by HIPAA and 42 CFR Part 2, we may use or disclose PHI without your authorization when required by law; for a bona fide medical emergency; for public health and safety; for certain audits and program evaluations; for research under Part 2 safeguards; to report suspected child abuse or neglect; and in response to a court order that meets Part 2 requirements.
Your rights regarding your PHI
You have the right to:
- Inspect and obtain a copy of your health and billing records, in the form you request when readily producible.
- Request an amendment to information you believe is incorrect or incomplete.
- Request restrictions on certain uses and disclosures.
- Request confidential communications (for example, contact at a specific phone number or address).
- Receive an accounting of certain disclosures we have made.
- Obtain a paper copy of this notice on request, even if you agreed to receive it electronically.
- Be notified if a breach of your unsecured PHI occurs.
Our duties and changes to this notice
We are required to abide by the terms of the notice currently in effect. We reserve the right to change this notice and to make the revised notice effective for PHI we already have, as well as information we receive in the future. The current notice will be posted here and available at our facility.
How to exercise your rights or file a complaint
To exercise any of these rights, contact our Privacy Officer at (818) 391-0246 or BelieveAndAchieveRecovery@gmail.com. If you believe your privacy rights have been violated, you may file a complaint with us and with the U.S. Department of Health and Human Services, Office for Civil Rights, at hhs.gov/ocr. You will not be penalized or retaliated against for filing a complaint.