WE RESPECT THAT YOUR HEALTH INFORMATION IS PERSONAL.
Protecting your privacy is one of our most important professional responsibilities. Federal law requires us to protect the privacy of your Protected Health Information ("PHI"), provide you with this Notice of Privacy Practices, and explain how we may use, disclose, and safeguard your health information.
This Notice describes your privacy rights, our legal responsibilities, and the ways we may use or disclose your PHI. Please read it carefully. If you have questions, we encourage you to contact the Healthcare Entity using the information provided at the end of this Notice.
NOTICE OF PRIVACY PRACTICES
Effective Date: July 1, 2026
Version 1.0
1. OUR COMMITMENT TO YOUR PRIVACY
The Healthcare Entity is committed to protecting the confidentiality, integrity, and security of your PHI in accordance with the Health Insurance Portability and Accountability Act of 1996 ("HIPAA"), applicable Florida law, and other applicable federal and state privacy laws.
We maintain reasonable administrative, physical, and technical safeguards designed to protect your information from unauthorized access, use, or disclosure.
When Florida law provides greater privacy protections than HIPAA, we will comply with the more protective law.
2. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
Federal law permits or requires us to use and disclose your PHI for certain purposes without obtaining additional written authorization from you.
2.1 Treatment
We may use and disclose your PHI to provide, coordinate, and manage your Healthcare Services. This includes communicating with physicians, healthcare providers, pharmacies, laboratories, imaging facilities, and others involved in your care.
2.2 Payment
We may use or disclose your PHI to obtain payment for Healthcare Services, verify insurance eligibility or benefits, submit claims, respond to payer requests, and collect payment for services provided.
2.3 Healthcare Operations
We may use your PHI to support our business operations, including quality improvement, staff training, licensing, accreditation, credentialing, auditing, compliance, risk management, customer service, and other activities necessary to operate our practice.
2.4 Business Associates
We may disclose PHI to trusted Business Associates that perform services on our behalf, such as electronic health record providers, billing companies, technology vendors, accountants, attorneys, or other service providers. Business Associates are required by law and contract to appropriately safeguard your PHI.
2.5 Appointment Reminders and Scheduling
We may use your PHI to contact you regarding appointment reminders, scheduling, rescheduling, cancellations, or other matters directly related to your Healthcare Services.
Appointment reminders and scheduling notifications may be delivered by telephone, voicemail, email, the secure Kalix patient portal, or text message (SMS), depending upon your communication preferences and any applicable opt-in requirements.
Certain electronic communications, including SMS and email reminders, require your separate consent through our electronic health record or communication platform before they may be sent.
2.6 Individuals Involved in Your Care
Unless you object, or unless otherwise prohibited by law, we may disclose relevant PHI to a family member, caregiver, legal representative, or other person involved in your care or payment for your care when permitted by HIPAA.
If you are unable to communicate your preferences because of an emergency or incapacity, we may use our professional judgment to determine whether a disclosure is in your best interest.
2.7 Public Health and Required Reporting
We may disclose PHI when required or permitted by law for public health activities, including reporting certain diseases, injuries, adverse events, births, deaths, or other matters to authorized public health agencies.
We may also disclose PHI when required to report suspected abuse, neglect, abandonment, exploitation, or other circumstances required by applicable law.
2.8 Health Oversight Activities
We may disclose PHI to governmental agencies authorized to oversee the healthcare system, including licensing boards, accreditation organizations, audits, inspections, investigations, or other health oversight activities authorized by law.
2.9 Legal Proceedings and Law Enforcement
We may disclose PHI in response to court orders, subpoenas, warrants, or other lawful legal process, or to law enforcement officials when permitted or required by applicable law.
We will make reasonable efforts to disclose only the information necessary for the authorized purpose.
2.10 Research
Under certain circumstances, we may use or disclose PHI for research activities when permitted or required by applicable law and approved through the processes required by HIPAA and other applicable regulations.
When required, we will obtain your written authorization before using or disclosing your PHI for research.
2.11 Serious Threats to Health or Safety
We may use or disclose PHI when we believe such disclosure is necessary to prevent or lessen a serious and imminent threat to the health or safety of you, another person, or the public, when permitted by applicable law.
2.12 Specialized Government Functions
When permitted or required by applicable law, we may disclose PHI for certain specialized governmental functions, including military activities, national security activities, correctional institutions, or other government programs authorized by law.
2.13 Organ and Tissue Donation
If applicable, we may disclose PHI to organizations involved in organ, eye, or tissue procurement, banking, or transplantation as permitted by applicable law.
2.14 Workers' Compensation
We may disclose PHI as authorized or required to comply with workers' compensation laws or similar programs established by applicable law.
3. USES AND DISCLOSURES REQUIRING YOUR WRITTEN AUTHORIZATION
Except as otherwise described in this Notice or permitted or required by applicable law, we will obtain your written authorization before using or disclosing your PHI.
Examples include, when applicable: marketing communications requiring authorization under HIPAA; the sale of PHI; most uses or disclosures of psychotherapy notes, if maintained; use of your photographs, audio recordings, or video recordings outside your medical record for educational, professional, publication, commercial, or promotional purposes; and other uses or disclosures requiring authorization under applicable law.
You may revoke a written authorization at any time by submitting a written request to the Healthcare Entity, except to the extent we have already relied upon the authorization or where revocation is otherwise limited by law.
4. YOUR PRIVACY RIGHTS
Subject to applicable law, you have the right to: inspect or obtain copies of your medical records; request amendments to your health information; request restrictions on certain uses or disclosures of your PHI; request confidential communications by alternative means or at alternative locations; receive an accounting of certain disclosures of your PHI; obtain a paper copy of this Notice, even if you previously agreed to receive it electronically; and file a complaint if you believe your privacy rights have been violated.
Parents or legal guardians generally exercise these rights on behalf of minor children, except where federal or Florida law provides otherwise.
5. OUR RESPONSIBILITIES
We are required by law to maintain the privacy and security of your PHI, provide you with this Notice of Privacy Practices, and comply with the terms of the Notice currently in effect. We will notify you following a reportable breach of your unsecured PHI as required by applicable law. We will not use or disclose your PHI in a manner inconsistent with this Notice unless permitted or required by law or authorized by you in writing.
6. CHANGES TO THIS NOTICE
We reserve the right to amend this Notice at any time to reflect changes in applicable law, technology, business operations, or privacy practices. Any revised Notice will apply to all PHI maintained by the Healthcare Entity, including information created or received before the revision becomes effective, to the extent permitted by law.
The current version of this Notice will be available upon request, through our patient portal if applicable, and on our website if maintained.
7. QUESTIONS, COMPLAINTS, AND CONTACT INFORMATION
If you have questions about this Notice, your privacy rights, or how the Healthcare Entity uses or protects your PHI, please contact:
Privacy Officer
Marthy Fingerhut
Address: 12651 W Sunrise Blvd, #100, Sunrise, FL 33323
Telephone:
Email: MarthyFingerhut@BlueOakHealth.onmicrosoft.com
If you believe your privacy rights have been violated, you may file a complaint with the Healthcare Entity using the contact information above. We encourage you to contact us first, so we have an opportunity to answer your questions and address your concerns promptly and respectfully.
You may also file a complaint with the Secretary of the United States Department of Health and Human Services, Office for Civil Rights. Filing a complaint will not affect your care, and we will not retaliate against you for exercising your privacy rights or filing a complaint.