1010 E McDowell Road, Suite 101, Phoenix, AZ 85006

⭐ Dr. Saperstein is gradually returning to clinic  |  Limited waitlist scheduling now underway  |  READ UPDATE

NOTICE OF PRIVACY PRACTICES

🔷 Overview

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

We are committed to protecting your privacy in accordance with applicable federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA).


Effective Date: 3/1/2026

🔷 Your Information

We are required by law to maintain the privacy of your protected health information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).

“Protected health information” is information about you created or received by us that may reasonably identify you and relates to your past, present, or future physical or mental health condition or payment for your care.

If federal or Arizona law provides greater privacy protections than HIPAA, we will follow the more stringent law. This includes certain categories of information protected under Arizona law, such as communicable disease information, HIV-related information, behavioral health records, genetic testing information, and other specially protected records.

🔷 Your Rights

You have the right to:

  • Get an electronic or paper copy of your medical record
    You may request access to or copies of your health information. We will provide copies within 30 days and may charge a reasonable cost-based fee.
  • Ask us to correct your medical record
    You may request corrections. We may deny the request but will provide a written explanation within 60 days.
  • Request confidential communications
    You may ask us to contact you in a specific way or at a specific location. We will accommodate reasonable requests.
  • Ask us to limit what we use or share
    You may request restrictions on treatment, payment, or healthcare operations disclosures. We are not required to agree if the restriction would affect your care.
    If you pay out-of-pocket in full for a service, you may request that we not disclose that information to your health plan for payment or operations purposes.
    Participation in electronic health information exchange networks is addressed separately in the “Health Information Exchange Participation” section of this Notice.
  • Get an accounting of disclosures
    You may request a list of certain disclosures made in the past six years. Disclosures made for treatment, payment, healthcare operations, and certain other permitted disclosures, including disclosures made through electronic health information exchange networks for treatment, are not included in this accounting.
  • Get a copy of this Notice
    You may request a paper copy at any time.
  • Choose someone to act for you
    If you have a medical power of attorney or legal guardian, that person may exercise your rights.
  • File a complaint
    You may file a complaint with us or with the U.S. Department of Health and Human Services. We will not retaliate against you.



HIPAA Contact:

Fran Saperstein, COO
1010 E. McDowell Rd., Suite 101
Phoenix, AZ 85003
(602) 900-9404

🔷 Your Choices

For certain health information, you can tell us your choices about what we share.

You can tell us to:

  • Share information with your family, close friends, or others involved in your care
  • Share information in a disaster relief situation

If you are not able to tell us your preference, we may share your information if we believe it is in your best interest.

We will not share your information without your written permission for:

  • Marketing purposes
  • Sale of your information
  • Most psychotherapy notes

🔷 How We Use and Share Your Information

We may use and disclose your protected health information in the following ways:

Treatment
We may use and disclose your protected health information for treatment purposes. This includes sharing information with physicians, specialists, hospitals, laboratories, pharmacies, and other healthcare providers involved in your care.

Treatment disclosures may occur verbally, in writing, or electronically.

We may share or receive your health information through secure electronic health information exchange networks, including CommonWell Health Alliance® and Carequality, when you have not declined participation, as described below.

Example: A provider treating you may access relevant medical history from another provider to coordinate care.

Payment
We may use and disclose your information to bill and receive payment from health plans or other responsible parties.

Healthcare Operations
We may use and disclose your information for operational purposes such as:

  • Quality improvement
  • Disease management
  • Care coordination programs
  • Training and education
  • Accreditation
  • Compliance and legal review
  • Business planning

We may share information with business associates who assist us in these functions.



We may also share your information to:

  • Public health activities
  • Reporting abuse or neglect
  • Health oversight activities
  • Law enforcement purposes
  • Judicial proceedings
  • Workers’ compensation
  • Organ donation
  • Research (when permitted by law)

🔷 Health Information Exchange Participation

Center for Complex Neurology, EDS & POTS participates in national electronic health information exchange networks, including CommonWell Health Alliance® and Carequality.

These secure networks allow participating healthcare providers and organizations to electronically access and share relevant health information for treatment purposes, including:

  • Care coordination
  • Referrals and consultations
  • Emergency treatment
  • Medication reconciliation
  • Continuity of care

Participation is voluntary. You may choose whether your information is made available through these networks. Your decision will not affect your ability to receive care.

If you participate, your information may be accessed by authorized healthcare providers involved in your care who participate in these exchange frameworks and who are required to comply with applicable privacy and security laws.

You may change your participation status at any time by submitting a written request. Revocation will not apply to disclosures already made.

🔷 Personal Health Record (PHR) Applications

If you choose to connect a personal health record application or digital health tool to CommonWell, we may make your information available at your direction.

Once information is transmitted to a third-party application that is not a HIPAA-covered entity or business associate, it may no longer be protected under HIPAA. The privacy practices of the application will govern how your information is used. We are not responsible for the privacy or security practices of third-party applications you choose to use.

🔷 How Else Can We Use or Share Your Information?

We may disclose your information when required or permitted by law, including:

  • Public health activities
  • Reporting abuse or neglect
  • Health oversight activities
  • Law enforcement purposes
  • Judicial proceedings
  • Workers’ compensation
  • Organ donation
  • Research (when permitted by law)

🔷 42 CFR Part 2 – Substance Use Disorder Records

Records relating to substance use disorder diagnosis, treatment, or referral that are protected under 42 CFR Part 2 require your written consent for use or disclosure for treatment, payment, or healthcare operations, unless otherwise permitted by law.

Part 2 protected records will not be made available through electronic health information exchange networks without your specific written consent, except as permitted or required by law.

We will only disclose Part 2 records in legal proceedings when:

  • You provide written consent; or
  • A court issues an appropriate order and legal requirements are met.

🔷 Our Responsibilities

We are required to:

  • Maintain the privacy and security of your protected health information
  • Notify you promptly if a breach occurs that may have compromised your information
  • Follow the duties and privacy practices described in this notice
  • Provide you with a copy of this notice upon request

We will not use or share your information other than as described here unless you give us written permission.

🔷 Changes to This Notice

We can change the terms of this notice, and the changes will apply to all information we have about you.

The new notice will be available upon request, in our office, and on our website.

🔷 Contact Information

If you have questions about this notice or your privacy rights, please contact:

Center for Complex Neurology, EDS & POTS
1010 E McDowell Rd, Suite 101
Phoenix, AZ 85006
Phone: (602) 900-9404

You may also contact the U.S. Department of Health and Human Services Office for Civil Rights.

🔷 Effective Date

Effective Date: 3/1/2026