HIPAA Notice of Privacy Practices

Our Commitment to Your Privacy

Kennedy Direct Primary Care is committed to protecting your health information. We are required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice of our legal duties and privacy practices, and to follow the terms of the Notice that is currently in effect.

How We May Use and Disclose Your Health Information

Treatment. We may use and disclose your PHI to provide you with medical treatment and services, coordinate your care with other healthcare providers (such as specialists), and manage your overall healthcare.

Payment. We may use and disclose your PHI to bill and collect payment for the services we provide. As a direct-pay practice, we do not bill insurance, but we may share information with payment processors.

Healthcare Operations. We may use and disclose your PHI for our internal operations, including quality assessment, training, and business planning.

Required by Law. We will disclose your PHI when required to do so by federal, state, or local law, such as reporting communicable diseases or responding to law enforcement requests.

Public Health Activities. We may disclose your PHI to public health authorities for activities such as disease prevention and reporting of adverse events.

Uses and Disclosures Requiring Your Authorization

We will obtain your written authorization before using or disclosing your PHI for purposes other than those described above, including:

• Marketing purposes
• Sale of your PHI
• Psychotherapy notes (where applicable)
• Most uses of your PHI not described in this Notice

Your Rights Regarding Your Health Information

You have the right to:

• Inspect and copy your PHI maintained by our practice
• Request an amendment to your PHI if you believe it is incorrect or incomplete
• Request restrictions on how we use or disclose your PHI
• Request confidential communications — for example, receiving communications at a specific address or phone number
• Receive an accounting of disclosures of your PHI made in the past six years
• Receive a paper copy of this Notice upon request

Our Responsibilities

We are required to:

• Maintain the privacy of your PHI
• Provide you with this Notice of our privacy practices
• Follow the terms of the Notice currently in effect
• Notify you if we are unable to agree to a requested restriction
• Accommodate reasonable requests for confidential communications

Changes to This Notice

We reserve the right to change this Notice and make the new provisions effective for all PHI we maintain. We will post revised notices in our clinic and on our website.

Complaints

If you believe your privacy rights have been violated, you may file a complaint with our practice or with the Secretary of Health and Human Services. We will not retaliate against you for filing a complaint.

Contact Our Privacy Officer

For questions about this Notice or to exercise your rights:

Kennedy Direct Primary Care — Privacy Officer
201 Washington Street, Chattahoochee, FL 32324
Email: eric@kennedyprimarycare.com
Phone: (850) 403-1239

You may also contact the U.S. Department of Health and Human Services Office for Civil Rights:
www.hhs.gov/hipaa · 1-800-368-1019