HIPAA Compliance

HIPAA Privacy Policy

Effective Date: 01/01/2025
Next Step Recovery AZ
Virtual Practice – Based in Arizona
Phone: (602) 781-4176 | Email: nextsteprecoveryaz@gmail.com

Next Step Recovery AZ is committed to protecting the privacy and security of your Protected Health Information (PHI) in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and all relevant state and federal confidentiality laws.

Use and Disclosure of Protected Health Information (PHI)

PHI includes any information in your medical record that identifies you and relates to your physical or mental health, treatment, or payment history. This may include diagnoses, care plans, session notes, prescriptions, and insurance details.

We may use or disclose your PHI in the following situations:

Treatment: To coordinate care within our clinic or with external licensed professionals involved in your treatment.
Payment: To obtain payment or authorization from your health insurance provider.
Healthcare Operations: For administrative purposes, staff training, quality assurance, and internal improvement.

Authorization for Other Uses

Any use or disclosure of your PHI outside of these standard functions requires your written authorization, which you may revoke at any time in writing.

Your Rights Under HIPAA

Right to Access: You may request a copy of your medical records.
Right to Amend: You can request corrections to your records if you believe there are errors.
Right to an Accounting of Disclosures: You may ask for a list of disclosures not related to treatment, payment, or operations.
Right to Request Restrictions: You can request limits on how we use or disclose your PHI.
Right to Confidential Communication: You may ask to be contacted at a certain location or in a certain way.
Right to a Paper Copy: You may request a printed copy of this policy at any time.

Safeguards and Security

All staff at Next Step Recovery AZ are trained in HIPAA compliance and are bound by confidentiality. We utilize secure, encrypted systems for electronic medical records, telehealth sessions, and insurance processing. Business Associate Agreements (BAAs) are in place with any third-party vendors handling your data.

Disclosures Without Authorization

We may disclose your PHI without authorization in specific cases including:

When required by law
To report child abuse or neglect
To prevent serious threats to health or safety
In response to court orders or subpoenas
For public health or national security purposes
During medical emergencies

Violations and Breaches

Should a data breach occur involving your unsecured PHI, you will be notified per HIPAA regulations. Any staff member violating this policy may face disciplinary action, up to and including termination.

Complaints and Contact Information

If you believe your privacy rights have been violated, you may file a complaint without fear of retaliation.

Privacy Officer
Next Step Recovery AZ
Phone: (602) 781-4176
Email: nextsteprecoveryaz@gmail.com

You may also contact:
U.S. Department of Health and Human Services – Office for Civil Rights
https://www.hhs.gov/hipaa