Notice of Privacy Practices

Our Legal Duty

Autism & Brain Institute is required by law to:

• Maintain the privacy of your Protected Health Information (PHI)
• Provide you with this Notice of our legal duties and privacy practices regarding PHI
• Follow the terms of the Notice currently in effect
• Notify you if we are unable to agree to a requested restriction
• Accommodate reasonable requests to communicate health information by alternative means or at alternative locations

We reserve the right to change the terms of this Notice and make new provisions effective for all PHI we maintain. If we make material changes, we will post the revised Notice in our office and on our website.

What is Protected Health Information (PHI)?

PHI is information that:

• Is created or received by a healthcare provider, health plan, or healthcare clearinghouse
• Relates to your past, present, or future physical or mental health condition
• Relates to the provision of healthcare to you
• Relates to payment for healthcare services
• Identifies you or could reasonably be used to identify you

How We May Use and Disclose Your PHI

For Treatment

We may use or disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes:

• Providing speech therapy, occupational therapy, and related services
• Consulting with other healthcare providers about your care
• Referring you to other healthcare professionals
• Coordinating care with schools or other agencies (with proper authorization)

For Payment

We may use or disclose your PHI to bill and collect payment for services, including:

• Submitting claims to your health insurance company
• Verifying insurance coverage and eligibility
• Obtaining prior authorization for services
• Collecting copays, deductibles, and outstanding balances

For Healthcare Operations

We may use or disclose your PHI for operational purposes, including:

• Quality assessment and improvement activities
• Reviewing competence of healthcare professionals
• Training programs and student supervision
• Business planning and development
• Compliance and licensing activities

Other Permitted Uses and Disclosures

We may also use or disclose your PHI without your authorization for:

• As Required by Law: When required by federal, state, or local law
• Public Health Activities: Reporting diseases, injuries, or vital events to public health authorities
• Abuse or Neglect: Reporting suspected child abuse or neglect to appropriate authorities as required by Nevada law (NRS 432B)
• Health Oversight: Audits, investigations, and inspections by government agencies
• Legal Proceedings: In response to court orders or subpoenas
• Law Enforcement: For specific law enforcement purposes as permitted by law
• To Avert Serious Threat: To prevent or lessen a serious and imminent threat to health or safety
• Workers' Compensation: As authorized by workers' compensation laws
• Coroners and Medical Examiners: For identification and cause of death determination

Uses Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for:

• Marketing purposes
• Sale of your PHI
• Most uses of psychotherapy notes (if applicable)
• Disclosures to schools, employers, or other third parties not involved in your care
• Any purpose not described in this Notice

You may revoke an authorization at any time in writing, except to the extent we have already acted upon it.

Minor Patients

As a pediatric therapy practice, we primarily serve minor patients. Under Nevada law:

• Parents and legal guardians generally have the right to access their minor child's PHI
• We may discuss your child's treatment, progress, and PHI with authorized family members involved in their care
• We will verify parental or guardian authority before disclosing PHI
• In cases of divorce or custody arrangements, we will follow court orders regarding access to the child's records

Breach Notification

In the event of a breach of unsecured PHI, we will notify affected individuals as required by law. Notification will be made without unreasonable delay and in no case later than 60 days following discovery of the breach.

Nevada State Privacy Laws

In addition to HIPAA, we comply with Nevada state laws regarding health information privacy, including:

• Nevada Revised Statutes (NRS) Chapter 629 - Health Care Records
• NRS 439.538 - Electronic Transmission of Health Information
• NRS 432B - Child Abuse and Neglect Reporting Requirements