HIPAA Notice of Privacy Practices

Effective Date: August 30, 2026

Your Information. Your Rights. Our Responsibilities.

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice of Privacy Practices describes how The Skin Group may use and disclose your Protected Health Information (“PHI”) and explains your rights regarding that information.

 

Your Rights

When it comes to your health information, you have certain rights.

 

Get a Copy of Your Medical Record

You may ask to see or obtain an electronic or paper copy of your medical record and other health information we maintain about you.

We will generally provide a copy or summary of your health information within the timeframe required by law. We may charge a reasonable, cost-based fee where permitted.

 

Ask Us to Correct Your Medical Record

You may ask us to correct health information about you that you believe is incorrect or incomplete.

We may deny your request in certain circumstances, but if we do, we will provide an explanation as required by law.

 

Request Confidential Communications

You may ask us to contact you in a specific way, such as only at a particular phone number, or to send mail to a different address.

We will accommodate reasonable requests.

 

Ask Us to Limit What We Use or Share

You may ask us not to use or disclose certain health information for treatment, payment, or healthcare operations.

We are generally not required to agree to such a request.

If you pay for a healthcare service or item entirely out of pocket, you may ask us not to disclose information about that service or item to your health insurer for payment or healthcare operations. We will honor this request unless disclosure is required by law.

 

Receive an Accounting of Disclosures

You may request a list of certain disclosures of your health information made during the period permitted by law.

This accounting generally does not include disclosures made for treatment, payment, healthcare operations, or certain other purposes excluded by law.

 

Get a Copy of This Notice

You may ask us for a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

 

Choose Someone to Act for You

If you have given another person medical power of attorney or if someone is your legal guardian or otherwise legally authorized to act for you, that person may exercise your privacy rights on your behalf.

We will verify that the person has appropriate authority before taking action.

 

File a Complaint

You may contact The Skin Group if you believe your privacy rights have been violated.

You may also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights.

We will not retaliate against you for filing a complaint.

 

Your Choices

For certain health information, you may tell us your preferences regarding what we share.

For example, in certain circumstances you may tell us whether we may:

  • Share information with family members, friends, or others involved in your care
  • Share information in a disaster-relief situation
  • Contact you regarding certain fundraising efforts

If you are unable to tell us your preference, such as during an emergency, we may share information when we believe doing so is in your best interest and is permitted by law.

We will obtain your written authorization before using or disclosing your information for purposes that require authorization under applicable law, including certain marketing activities or the sale of Protected Health Information.

You may revoke an authorization in writing at any time, except to the extent that we have already acted in reliance upon it.

 

How We May Use and Disclose Your Health Information

We may use and disclose your Protected Health Information without written authorization when permitted or required by law.

 

Treatment

We may use and share your health information to provide, coordinate, or manage your healthcare.

For example, we may share information with another physician or healthcare provider involved in your treatment.

 

Payment

We may use and disclose your health information to bill and obtain payment for healthcare services.

For example, we may provide information to your health insurance company so that it can process a claim.

 

Healthcare Operations

We may use and disclose health information in connection with operating our practice.

For example, we may use health information for quality assessment, staff training, compliance activities, credentialing, auditing, and improving patient care.

 

Business Associates

We may share information with companies that perform services on our behalf when those companies need access to Protected Health Information to perform those services.

Where required, these organizations are contractually obligated to appropriately safeguard your information.

 

Public Health and Safety

We may disclose health information for certain public health and safety activities, including:

  • Preventing disease
  • Reporting adverse reactions to medications or products
  • Reporting suspected abuse, neglect, or domestic violence as required or permitted by law
  • Preventing or reducing a serious threat to health or safety

 

Required by Law

We may disclose your health information when federal, state, or local law requires us to do so.

 

Health Oversight Activities

We may disclose health information to health oversight agencies for activities authorized by law, such as audits, investigations, inspections, and licensing activities.

 

Lawsuits and Legal Proceedings

We may disclose health information in response to a valid court or administrative order, subpoena, discovery request, or other lawful process when permitted by law.

 

Law Enforcement

We may disclose health information to law enforcement officials under circumstances specifically permitted or required by law.

 

Coroners, Medical Examiners, and Funeral Directors

We may disclose health information to coroners, medical examiners, or funeral directors when permitted or required by law.

 

Workers’ Compensation

We may disclose health information as authorized by and to the extent necessary to comply with workers’ compensation laws and similar programs.

 

Our Responsibilities

The Skin Group is required by law to:

  • Maintain the privacy and security of your Protected Health Information
  • Inform you promptly if a breach occurs that may have compromised the privacy or security of your information when notification is required by law
  • Follow the privacy practices described in the version of this Notice currently in effect
  • Provide you with a copy of this Notice
  • Not use or disclose your health information except as described in this Notice or otherwise permitted or required by law, unless you provide written authorization

 

Changes to This Notice

We may change the terms of this Notice, and those changes may apply to all Protected Health Information we maintain, including information created or received before the change.

An updated Notice will be available upon request, at our offices, and on our website.