HIPAA Notice of Privacy Practices

HIPAA Notice of Privacy Practices

Effective Date: July 29, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

At Anbreya Health, a DBA of Anbreya, Inc., we are committed to protecting the privacy and confidentiality of your protected health information (PHI). This Notice explains how we may use and disclose your medical information, your rights regarding that information, and our legal responsibilities under the Health Insurance Portability and Accountability Act (HIPAA).

Our Commitment to Your Privacy

We understand that your health information is personal and sensitive. We are required by law to:

  • Maintain the privacy and security of your protected health information (PHI).
  • Provide you with this Notice of our legal duties and privacy practices.
  • Follow the terms of this Notice currently in effect.
  • Notify you if a breach occurs that may have compromised the privacy or security of your information.

What Is Protected Health Information (PHI)?

Protected Health Information (PHI) includes information that identifies you and relates to:

  • Your physical or mental health condition
  • Healthcare services you receive
  • Payment for healthcare services
  • Medical records
  • Treatment plans
  • Prescriptions
  • Insurance information
  • Appointment history

PHI may exist in electronic, paper, or verbal form.

How We May Use and Disclose Your Health Information

Treatment

We may use and share your health information to provide, coordinate, or manage your healthcare.

Examples include:

  • Conducting psychiatric evaluations
  • Developing treatment plans
  • Medication management
  • Consulting with other healthcare providers involved in your care (when appropriate)

Payment

We may use your information to:

  • Verify insurance eligibility
  • Submit claims
  • Process payments
  • Obtain prior authorizations
  • Bill for services provided

Healthcare Operations

We may use your information for activities necessary to operate our practice, including:

  • Quality improvement
  • Staff training
  • Compliance reviews
  • Licensing requirements
  • Business management
  • Performance evaluation

Appointment Reminders

We may contact you regarding:

  • Upcoming appointments
  • Follow-up visits
  • Appointment confirmations
  • Changes to scheduled appointments

Communication may occur by phone, text message, email, or secure patient portal, based on your preferences and applicable law.

Required by Law

We may disclose your information when required by federal, state, or local law, including:

  • Court orders
  • Public health reporting
  • Law enforcement requests when legally authorized
  • Government audits
  • Regulatory investigations

Public Health and Safety

We may disclose health information when necessary to:

  • Prevent or reduce a serious threat to health or safety
  • Report abuse or neglect when required by law
  • Comply with public health reporting requirements

Business Associates

We may share information with trusted third-party service providers who assist us in operating our practice, such as:

  • Electronic health record providers
  • Billing companies
  • Secure telehealth platforms
  • IT service providers

These organizations are required by law and contract to protect your information.

Uses Requiring Your Written Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes not otherwise permitted by HIPAA, unless required or permitted by law.

Examples may include:

  • Certain marketing communications
  • Disclosure of psychotherapy notes, when applicable
  • Sharing information with individuals or organizations not involved in your care
  • Other uses requiring your explicit consent

You may revoke your authorization at any time in writing, except where we have already relied on it.

Your Rights Regarding Your Health Information

You have the following rights under HIPAA, subject to certain legal exceptions:

Right to Access Your Records

You may request to inspect or receive a copy of your medical records and certain health information.

Right to Request Corrections

If you believe information in your medical record is inaccurate or incomplete, you may request that it be amended.

Right to Request Restrictions

You may request limitations on how your health information is used or disclosed.

While we will consider your request, we are not always required to agree, except where required by law.

Right to Confidential Communications

You may request that we communicate with you in a specific way or at a specific location.

For example:

  • Only calling a certain phone number
  • Using a different mailing address
  • Sending secure email communications when appropriate

Right to Receive an Accounting of Disclosures

You may request a list of certain disclosures of your PHI made outside of treatment, payment, and healthcare operations.

Right to Receive a Paper Copy of This Notice

You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically.

Telehealth Privacy

Anbreya Health provides secure telehealth psychiatric services.

We take reasonable administrative, technical, and physical safeguards to protect your privacy during virtual appointments. While no technology can guarantee absolute security, we use appropriate measures designed to help protect your health information.

Patients are encouraged to participate in telehealth visits from a private location and to use secure internet connections whenever possible.

Our Responsibilities

We are required to:

  • Protect the privacy of your protected health information.
  • Maintain appropriate safeguards to prevent unauthorized access.
  • Follow applicable HIPAA regulations.
  • Honor your legal privacy rights.
  • Notify affected individuals of certain breaches involving unsecured PHI, as required by law.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights (OCR).

We will not retaliate against you for filing a complaint.

To submit a privacy concern, please contact us using the information below.

Changes to This Notice

We reserve the right to revise this Notice of Privacy Practices.

Any updated version will apply to all protected health information maintained by Anbreya Health and will be posted on our website with a revised effective date.

Contact Information

If you have questions about this Notice or your privacy rights, please contact:

Anbreya Health
A DBA of Anbreya, Inc.

Phone: 410-921-9180
Fax: 410-226-9712
Email: hello@anbreya.com

Acknowledgment

By becoming a patient of Anbreya Health, you acknowledge that you have been offered access to this Notice of Privacy Practices. Your receipt of this Notice does not require you to waive any of your rights under HIPAA or applicable law.