HIPAA Compliance at Rosebay Behavioral Health

Rosebay Behavioral Health is committed to protecting your privacy and upholding the standards set forth by the Health Insurance Portability and Accountability Act (HIPAA). HIPAA mandates specific rules to safeguard Protected Health Information (PHI) and ensure your health information remains private and secure. Below, we outline our HIPAA practices to help you understand your rights and how we protect your information.

Your Privacy Rights Under HIPAA

As a client of Rosebay Behavioral Health, you have the following rights under HIPAA:

  • Right to Access: You may request access to your health records, which we will provide promptly as allowed by law.
  • Right to Amend: If you believe your health information is incorrect or incomplete, you have the right to request an amendment.
  • Right to Confidential Communications: You can request that we communicate with you using alternative methods or locations (e.g., through a different phone number or mailing address).
  • Right to Request Restrictions: You may request limitations on how we use or disclose your health information for treatment, payment, or healthcare operations. Although we will review each request, certain limitations may apply based on legal obligations.
  • Right to Receive a Copy of This Notice: You may request a physical or electronic copy of this HIPAA notice at any time.

How We Protect Your Health Information

Rosebay Behavioral Health implements several administrative, physical, and technical safeguards to protect your PHI. These measures are designed to prevent unauthorized access, maintain data accuracy, and ensure the appropriate use of your health information. Our safeguards include:

  • Secure Access Controls: Only authorized staff members are permitted to access your PHI, and access is based on job requirements.
  • Data Encryption: We use encryption to protect your health information when it is stored and transmitted electronically.
  • Confidentiality Training: All employees are trained on HIPAA policies and the importance of maintaining patient confidentiality.
  • Audit Controls: Regular audits and risk assessments are conducted to ensure the security of our systems and to identify and address any potential vulnerabilities.

Uses and Disclosures of Your Health Information

Your PHI may be used or disclosed for specific purposes related to your care, including:

  • Treatment: Information may be shared with healthcare professionals involved in your treatment to ensure coordinated and effective care.
  • Payment: We may use or disclose your PHI to process billing and payments for the services you receive.
  • Healthcare Operations: We may use your PHI for operational purposes, such as quality improvement initiatives and staff training.

Certain disclosures, such as those for marketing or fundraising, require your written authorization. You may revoke your consent for these activities at any time.

Disclosure Exceptions Permitted by Law

HIPAA permits the use or disclosure of your PHI without your authorization under specific circumstances, including:

  • Public Health Reporting: We may report health information as required for public health and safety, such as reporting communicable diseases.
  • Law Enforcement and Legal Requests: PHI may be disclosed as necessary for law enforcement purposes or in response to a valid court order or subpoena.
  • Emergency Situations: In cases of immediate risk to your health or safety, we may use or disclose your information to protect you or others from harm.

Complaints and Questions

If you have any concerns about your privacy or believe your rights have been violated, you may file a complaint. To do so, please contact us at:

Rosebay Behavioral Health
201 San Anselmo Ave.
San Anselmo, CA 94960
Phone: 415-526-6360
Email: contact@rosebaybh.com

Alternatively, you may file a complaint directly with the U.S. Department of Health and Human Services. Rosebay Behavioral Health ensures that filing a complaint will not affect your care or treatment in any way.