Notice of Privacy Practices
Last updated: TODO
Draft — not reviewed by counsel
This is a structural template to work from, not legal advice and not a finished policy. A healthcare attorney must review and complete it before launch. Remove this banner by passing reviewed once that is done.
This notice describes how medical information about you may be used and disclosed, and how you can get access to this information. Please review it carefully.
Before you publish this
A Notice of Privacy Practices is a regulated document under the HIPAA Privacy Rule, and its required content and formatting are prescribed by regulation. Do not adapt this scaffold on your own. The U.S. Department of Health and Human Services publishes model notices, and your healthcare attorney should produce the final version.
The sections below are placeholders indicating the required structure only.
How we may use and disclose your health information
TODO: treatment, payment, and healthcare operations, each with examples.
Uses and disclosures that require your authorization
TODO: marketing, sale of information, and most psychotherapy notes.
Your rights
TODO: right to access, amend, request restrictions, request confidential communications, receive an accounting of disclosures, and receive a paper copy of this notice.
Our responsibilities
TODO: including the obligation to notify you following a breach of unsecured protected health information.
Complaints
TODO: how to complain to Stakt Health and to the HHS Office for Civil Rights, plus a statement that you will not be retaliated against.
Contact
Privacy Officer: hello@stakthealth.com — TODO: designate a named Privacy Officer, which HIPAA requires.