HIPAA Notice of Privacy Practices and Patient Rights


Effective Date: September 20, 2017

This Notice describes how health information may be used and disclosed and how it can be accessed. Please review it carefully.


Entities Covered by This Notice

This Notice applies to Thriving Center of Psychology and its affiliated entities, collectively referred to as “Thriving Center of Psychology,” “we,” “our,” or “us.”

Therapy Services

  • Thriving Mind Psychology, PLLC: (MA, MN, NV, NY, OR, DC, IL)
  • LA Performance Psychology, PC: (NE, TX, WA, CA)
  • Thriving Center of Psychology, LLC: (FL)
  • Thriving Center for Psychology NJ, LLC: (NJ)
  • Thriving Center of Psychology NM, LLC: (NM)
  • AA Psychology, PLLC: (All States)

Psychiatry Services

  • Thriving Mind Psychiatry, PLLC: (NY)
  • Thriving Center of Psychiatry, PC: (CA, WA)

Notice of Privacy Practices

Our Pledge Regarding Health Information

Health information about patients and the care provided is personal, and it is protected as required by law. Records of care are created to provide quality care and to comply with legal obligations.

This Notice applies to all records of care generated by this practice. It describes how health information may be used and disclosed and outlines patient rights regarding their health information.

We are required by law to:

  • Ensure that protected health information (PHI) identifying a patient is kept private.
  • Provide this Notice detailing our legal duties and privacy practices regarding health information.
  • Follow the terms of the current Notice.

Changes to this Notice may occur. Updated versions will be available upon request, in our office, and on our website.


How Health Information May Be Used and Disclosed

The following categories describe different ways health information may be used and disclosed. Examples are provided for clarification. Not all possible uses or disclosures are listed, but all fall within one of these categories.

For Treatment, Payment, or Health Care Operations

Health care providers are permitted to use or disclose PHI without written authorization to carry out treatment, payment, or health care operations.

For example:

  • A clinician may consult another licensed health care provider about a condition, using the patient’s health information to assist in diagnosis and treatment.

Disclosures for treatment purposes are not limited to the minimum necessary standard, as providers require access to full and complete information to deliver quality care.

Lawsuits and Disputes

Health information may be disclosed in response to a court or administrative order, subpoena, discovery request, or other lawful processes, provided efforts have been made to notify the individual or obtain a protective order.


Uses and Disclosures Requiring Authorization

Psychotherapy Notes

“Psychotherapy notes” may be used or disclosed only with written authorization, except in the following situations:

  • For treatment purposes.
  • For training or supervising mental health practitioners.
  • To defend against legal proceedings initiated by the patient.
  • To comply with investigations by the Secretary of Health and Human Services.
  • When required by law, with limitations based on the legal requirements.

Marketing Purposes

Protected health information will not be used or disclosed for marketing purposes without patient authorization.

Sale of PHI

PHI will not be sold as part of regular business activities.


Uses and Disclosures That Do Not Require Authorization

Certain uses and disclosures may occur without patient authorization, subject to legal limitations:

  • When required by state or federal law.
  • For public health activities, such as reporting suspected abuse or preventing threats to safety.
  • For oversight activities like audits and investigations.
  • For judicial or administrative proceedings, such as responding to a court order.
  • For law enforcement purposes, including reporting crimes on premises.
  • For research purposes, including studies comparing treatment outcomes.
  • For specialized government functions, such as ensuring the safety of correctional institutions.
  • For workers’ compensation purposes.

Appointment Reminders and Health-Related Benefits or Services

PHI may be used to:

  • Provide appointment reminders.
  • Inform patients about treatment alternatives or services offered.

Uses and Disclosures Requiring the Opportunity to Object

Disclosures to Family, Friends, or Others

PHI may be shared with family, friends, or others involved in care or payment, unless an objection is raised. Consent may be obtained retroactively in emergencies.


Patient Rights Regarding PHI

  1. Right to Request Limits on Uses and Disclosures
    Patients may request restrictions on the use or disclosure of their PHI. While these requests will be considered, they may not always be accommodated if they affect care.
  2. Right to Request Restrictions for Fully Paid Services
    Patients may request restrictions on disclosures to health plans for services paid for out-of-pocket in full.
  3. Right to Choose Communication Methods
    Patients can specify preferred contact methods or addresses, and reasonable requests will be accommodated.
  4. Right to Access PHI
    Patients can request copies of their medical records (excluding psychotherapy notes) in paper or electronic form. Requests will be fulfilled within 30 days, and reasonable fees may apply.
  5. Right to Receive an Accounting of Disclosures
    Patients can request a list of disclosures made for purposes other than treatment, payment, or health care operations. One request per year is free; additional requests may incur fees.
  6. Right to Correct or Update PHI
    Corrections or updates to PHI can be requested if errors or missing information are identified. Requests may be denied, but explanations will be provided in writing.
  7. Right to a Copy of This Notice
    Patients may request a paper or electronic copy of this Notice at any time.

Patient Rights and Responsibilities

Patient Rights

Patients are entitled to:

  • Respectful and considerate care without discrimination.
  • Participation in treatment decisions, including informed consent.
  • Information about health status, treatment options, and care providers.
  • Access to treatment records and privacy during consultations.
  • The ability to file complaints regarding care or discrimination.

Patient Responsibilities

Patients are encouraged to:

  • Provide accurate and complete information about their health history.
  • Notify providers of changes in their condition or safety concerns.
  • Follow care plans and instructions provided by health care professionals.
  • Keep appointments or provide notice of cancellations at least 48 hours in advance.
  • Treat staff with respect and adhere to practice policies.

Contact Information

For additional information, questions, or concerns, please contact:
Email: [email protected]

Address for Complaints:
U.S. Department of Health and Human Services
200 Independence Avenue, SW Room 509F, HHH Building
Washington, D.C. 20201

Phone: 1-800-368-1019, 800-537-7697 (TDD)
Complaint Forms: HHS OCR Complaint Portal


This Notice was last updated on November 6, 2024.