Empower Recovery LLC is committed to protecting the privacy and security of your Protected Health Information (PHI) in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable federal and state laws. This policy outlines how we collect, use, disclose, and safeguard your medical records, your rights regarding your health information, and our obligations to protect it.

Use and Disclosure of Protected Health Information

We use and disclose your PHI only as permitted by law and in accordance with HIPAA regulations. Your health information may be used for the following purposes:

• Treatment: We share relevant medical information with healthcare providers involved in your care to ensure coordination of services, accurate diagnoses, and effective treatment plans.
• Payment: We use and disclose PHI to process insurance claims, verify coverage, and obtain reimbursement for services provided. This may include communication with insurance providers, billing services, or third-party payers.
• Healthcare operations: We utilize PHI for internal administrative processes, quality improvement efforts, staff training, accreditation requirements, compliance monitoring, and operational management to enhance service delivery and patient care.

In addition to these primary uses, we may disclose PHI as required by law, in response to court orders, public health reporting, compliance with federal oversight agencies, and law enforcement requests. Any other use or disclosure of your PHI requires your explicit authorization, which you have the right to revoke at any time.

Patient Rights Regarding Health Information

Under HIPAA, you have several rights regarding your health information, including:

• Right to access: You have the right to request and receive a copy of your medical records, including electronic health records.
• Right to amend: If you believe that any information in your records is incorrect or incomplete, you may request an amendment.
• Right to confidential communications: You can request that we contact you through specific means (e.g., phone, email, mail) or at a certain location to ensure privacy.
• Right to request restrictions: You may request limitations on how we use or disclose your PHI for treatment, payment, or healthcare operations. While we are not required to agree to all restrictions, we will comply whenever possible.
• Right to accounting of disclosures: You can request a list of instances in which we have disclosed your PHI outside of treatment, payment, and healthcare operations.
• Right to a copy of this privacy policy: You may request a physical or electronic copy of this notice at any time.

Safeguarding Your Health Information

Empower Recovery implements strict administrative, technical, and physical safeguards to protect your PHI from unauthorized access, use, or disclosure. We maintain secure electronic health records (EHR), employ encryption and access controls, and ensure that only authorized personnel handle patient information. Our staff undergoes regular HIPAA compliance training to uphold the highest standards of privacy and security.

If a breach occurs that may have compromised the privacy or security of your health information, we will notify you promptly in accordance with federal and state breach notification laws.

Compliance with Civil Rights and Accessibility Laws

Empower Recovery complies with federal civil rights laws and does not discriminate in the provision of healthcare services. We ensure equal access to care for individuals with disabilities and those with limited English proficiency by offering reasonable accommodations, translation services, and alternative communication methods to facilitate understanding and engagement in treatment.

Changes to This Privacy Policy

We reserve the right to modify this privacy policy as necessary to comply with legal requirements or reflect changes in our privacy practices. Any updates will apply to all PHI maintained by Empower Recovery and will be posted on our website. A copy of the revised policy will be made available upon request.