Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Privacy Contact

Andi Woodbury, DO
Phone: 970-239-3010
Email: dr.woodbury@northstarpsychiatry.us

Pledge Regarding Personal Health Information (PHI)

I understand that personal health information (information about you and your health or "PHI") is deeply personal and I am committed to maintaining the confidentiality of your health information. I create and maintain a record of the care and services that you receive from me. This record is necessary to treat you and to comply with certain legal requirements. This notice applies to all of the records of your care with me, whether made by me or by other personnel within my practice. Mental health records are handled with additional care and confidentiality consistent with professional standards and applicable law.

This notice advises you about the ways in which I may use and disclose health information about you. It also describes your rights to access and control your health information. "Protected Health Information" (PHI) is information about you, including demographic information, that may identify you and that relates to your past, present, or future physical or mental health or condition and related health care services.

My Legal Duties

I am required by law to:

Make sure that health information that identifies you is kept private.
Provide you with this notice of my legal duties and privacy practices with respect to your health information.
Follow the terms of this notice currently in effect.

I may change the terms of this notice at any time. The new notice will be effective for all protected health information that I maintain at that time. Upon request, I will provide you with a revised Notice of Privacy Practices by mail, at your next visit, or via my website.

Right to Be Notified of a Breach

You have the right to be notified in accordance with applicable federal and state law if a breach of your unsecured protected health information occurs.

How Health Information May Be Used and Disclosed

The following categories describe different ways that I may use and disclose health information.

Treatment

I may use health information about you to provide treatment or services. I may disclose health information to other health care professionals involved in your care for coordination and continuity of care.

Payment

I may use and disclose health information so that services provided may be billed and payment collected from you, your insurance plan, or another responsible party.

Health Care Operations

I may use and disclose health information for practice operations, quality improvement, and administrative purposes. Disclosures will be limited to the minimum necessary to accomplish the intended purpose, except as otherwise permitted by law.

Appointment Reminders

I may use and disclose health information to send appointment reminders or confirmations.

Treatment Alternatives

I may use and disclose health information to inform you about treatment options or alternatives.

Health-Related Benefits and Services

I may use and disclose health information to tell you about health-related services that may be of interest to you.

Research

I may use or disclose de-identified health information for research purposes. If protected health information is involved, I will obtain your specific written authorization unless otherwise permitted by law.

Special Situations

Emergencies

I may use or disclose health information in an emergency treatment situation. If possible, consent will be obtained as soon as practical.

As Required by Law

I will disclose health information when required by federal, state, or local law.

Legal Proceedings

I may disclose health information in response to a court or administrative order, subpoena, or lawful process as required by law.

Public Health Activities

I may disclose health information for public health purposes, including disease prevention, reporting abuse or neglect, product recalls, and reporting reactions to medications.

To Avert a Serious Threat to Health or Safety

I may use or disclose health information when necessary to prevent a serious and imminent threat to health or safety.

Law Enforcement

I may disclose health information for law enforcement purposes as required by law.

National Security and Intelligence Activities

I may disclose health information to authorized federal officials for lawful national security activities.

Military and Veterans

If you are a member of the armed forces, health information may be disclosed as required by military authorities or to the Department of Veterans Affairs.

Health Oversight Activities

I may disclose health information to oversight agencies for audits, investigations, inspections, or licensure activities authorized by law.

Electronic Communications

Health information may be communicated electronically for treatment, payment, or health care operations. Reasonable safeguards are used to protect privacy; however, no electronic communication system can be guaranteed to be completely secure. Electronic communications are not monitored continuously and should not be used for emergencies or urgent clinical matters.

Telehealth Services

When services are provided via telehealth, protected health information may be exchanged using secure, HIPAA-compliant platforms. Telehealth services are provided in accordance with applicable federal law and Colorado state law. Patients are encouraged to participate from a private location and take reasonable steps to protect their own privacy.

Your Rights Regarding Health Information

Right to Inspect and Copy

You have the right to inspect and obtain a copy of health information used to make decisions about your care, with limited exceptions. Psychotherapy notes are excluded. Requests must be submitted in writing to the Privacy Contact. Reasonable, cost-based fees may apply. Because psychiatric records may contain clinical terminology that can be complex or sensitive, patients are encouraged, but not required, to schedule a follow-up appointment to review records and address any questions.

Right to Amend

You may request an amendment to health information you believe is incorrect or incomplete. Requests must be in writing and may be denied as permitted by law.

Right to Request Restrictions

You may request restrictions on certain uses or disclosures of your health information. I am not required to agree to all requests.

Right to an Accounting of Disclosures

You may request an accounting of disclosures made during the six years prior to the request, excluding disclosures for treatment, payment, and health care operations, or before the date the practice began maintaining records, whichever is later.

Right to Request Confidential Communications

You may request alternative methods or locations for communications about your health information.

Right to a Paper Copy

You have the right to receive a paper copy of this notice upon request.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with the practice or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be penalized or retaliated against for filing a complaint.

Other Uses of Health Information

Other uses and disclosures not covered by this notice will be made only with your written authorization. You may revoke an authorization at any time in writing, except to the extent actions have already been taken.

Effective Date: September 1, 2025