Notice of Privacy Practices

We use and disclose your child's protected health information for the following purposes without additional authorization, as permitted by law, while ensuring medical information privacy and honoring patient rights:

Treatment. We utilize PHI to provide and coordinate your child's ABA services, which includes sharing health information disclosure among the BCBAs, Registered Behavior Technicians, and clinical staff involved in your child's care.

Payment. We use and disclose PHI to obtain authorization for services and to bill and receive payment from Medicaid, Tricare, managed care plans, commercial insurance plans, other payers, or you.

Health Care Operations. We apply PHI for various purposes such as quality improvement, supervision, training, compliance, and business operations.

Business Associates. We may share PHI with vendors who perform services for us, including our documentation system and billing vendor, under written agreements that require them to protect PHI and uphold medical information privacy.

As Required by Law. We disclose PHI when mandated by law, which includes circumstances involving public health and safety, suspected abuse or neglect reporting, and government oversight.

For any health information disclosure regarding your child's PHI that is not outlined above, we will first obtain your written authorization. This includes most uses of PHI for marketing as well as any sharing of psychotherapy notes, ensuring we adhere to medical information privacy standards. You have the right to revoke your authorization in writing at any time, and we will cease future use, except to the extent we have already relied on it, in accordance with patient rights.

We are required by law to maintain the privacy and security of your child's health information, ensuring compliance with medical information privacy regulations. This includes notifying you following a breach of unsecured PHI and adhering to the duties and privacy practices outlined in this Notice. Additionally, we will obtain your written acknowledgment of receipt of this Notice. We will not use or share your information beyond what is described here unless you provide us with your written consent, thereby respecting your patient rights.

You have the right to: 

See and receive a copy of your child's health records, as provided by law, ensuring you are informed about health information disclosure. 

Request corrections to your child's health information, maintaining accuracy in their medical information privacy. 

Be notified about how your child's health information is used and shared, through this Notice. 

Decide how your child's information is utilized, including requesting restrictions on certain uses and disclosures and requesting confidential communications. 

Receive a report, known as an accounting, detailing when and why your child's health information was shared under specific circumstances. 

File a complaint if you believe your privacy rights have been violated or if your child's information is not adequately protected. Rest assured, you will not be retaliated against for filing a complaint.

To exercise any of your patient rights, ask questions, or file a complaint regarding health information disclosure, please contact the Privacy Officer at Positive Steps ABA, 1912 Dairy Road, West Melbourne, FL 32904, (321) 413-3366, Admin@PositiveStepsABA.com. 

You also have the option to file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, located at 200 Independence Avenue SW, Washington, D.C. 20201, by calling 1-877-696-6775, or visiting hhs.gov/ocr/privacy/hipaa/complaints. 

Rest assured, we will not retaliate against you for filing a complaint related to medical information privacy.

We may change this Notice regarding health information disclosure, and the changes will apply to all medical information we have about your child. The updated Notice will ensure patient rights and will be available at our clinic, on this website, and upon request.