At Oregon Neurofeedback, Infra-Low Frequency (ILF) Neurofeedback supports high-performing individuals, athletes, and those seeking greater consistency, resilience, and balance.
Privacy Policy
NOTICE OF PRIVACY PRACTICES
I. OUR PLEDGE REGARDING HEALTH INFORMATION
We understand that health information about individuals and their health care is personal. We are committed to protecting health information about individuals. We create records of the care and services individuals receive from us. We need these records to provide quality care and to comply with certain legal requirements. This notice applies to all records of care generated by this practice. This notice will tell individuals about the ways in which we may use and disclose health information and describe their rights regarding the health information we keep. We are required by law to:
- Make sure that protected health information (“PHI”) that identifies individuals is kept private.
- Give individuals this notice of our legal duties and privacy practices with respect to health information.
- Follow the terms of the notice that is currently in effect.
We can change the terms of this Notice, and such changes will apply to all information we have about individuals. The new Notice will be available upon request, in our office, and on our website.
II. HOW WE MAY USE AND DISCLOSE HEALTH INFORMATION
The following categories describe different ways that we use and disclose health information. Not every use or disclosure in a category will be listed, but all uses fall within one of the categories.
For Treatment, Payment, or Health Care Operations: Federal privacy rules allow health care providers who have a direct treatment relationship with individuals to use or disclose personal health information without written authorization to carry out treatment, payment, or health care operations. We may also disclose PHI for the treatment activities of any health care provider. For example, if we consult with another licensed health care provider about an individual’s condition, we may share PHI to assist in diagnosis and treatment.
Disclosures for treatment purposes are not limited to the minimum necessary standard because other health care providers may need access to the full record and/or full information to provide quality care. “Treatment” includes coordination and management of health care providers, consultations, and referrals.
Lawsuits and Disputes: If individuals are involved in a lawsuit, we may disclose health information in response to a court or administrative order. We may also disclose health information about an individual’s child in response to a subpoena, discovery request, or other lawful process, but only if efforts have been made to notify the individual or to obtain an order protecting the information.
III. CERTAIN USES AND DISCLOSURES REQUIRE AUTHORIZATION
Session Notes: We keep “Session notes,” and any use or disclosure requires Authorization unless the use or disclosure is:
a. For our use in treating individuals.
b. For our use in training or supervising associates to improve clinical skills.
c. For our use in defending ourselves in legal proceedings instituted by individuals.
d. For use by the Secretary of Health and Human Services to investigate HIPAA compliance.
e. Required by law and limited to such requirements.
f. Required for certain health oversight activities pertaining to the originator of the session notes.
g. Required by a coroner performing duties authorized by law.
h. Required to avert a serious threat to the health and safety of others.
Marketing Purposes: We will not use or disclose PHI for marketing purposes.
Sale of PHI: We will not sell PHI in the regular course of business.
IV. CERTAIN USES AND DISCLOSURES DO NOT REQUIRE AUTHORIZATION
We may use and disclose PHI without Authorization for:
- Disclosures required by law.
- Public health activities (e.g., reporting suspected abuse, preventing threats to health).
- Health oversight activities (e.g., audits, investigations).
- Judicial and administrative proceedings (preferably with Authorization).
- Law enforcement purposes (e.g., reporting crimes on premises).
- Coroners or medical examiners performing authorized duties.
- Research purposes (e.g., comparing treatment outcomes).
- Specialized government functions (e.g., military missions, intelligence, correctional safety).
- Workers’ compensation compliance.
- Appointment reminders and notifications of health-related benefits/services.
V. CERTAIN USES AND DISCLOSURES REQUIRE THE OPPORTUNITY TO OBJECT
Disclosures to family, friends, or others: We may provide PHI to a family member, friend, or other person involved in care or payment unless individuals object. In emergencies, consent may be obtained retroactively.
VI. INDIVIDUALS’ RIGHTS REGARDING PHI
- Request Limits on Uses and Disclosures: Individuals may ask us not to use or disclose certain PHI. We are not required to agree.
- Request Restrictions for Out-of-Pocket Expenses Paid in Full: Individuals may request restrictions on disclosures to health plans if they paid in full out-of-pocket.
- Choose How We Send PHI: Individuals may ask for specific contact methods or alternate addresses.
- See and Get Copies of PHI: Individuals may obtain electronic or paper copies of their medical records, excluding session notes. Copies or summaries are provided within 30 days; a reasonable cost-based fee may apply.
- Get a List of Disclosures: Individuals may request a list of disclosures outside treatment, payment, or operations for the past six years.
- Correct or Update PHI: Individuals may request corrections or additions; we will respond within 60 days and may deny requests in writing.
- Get a Paper or Electronic Copy of This Notice: Individuals may request paper copies even if they agreed to receive it electronically.