Notice of Privacy Practices
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND
HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
EFFECTIVE DATE: JULY 2026
LOCATION: NORWALK, CONNECTICUT (SERVICING IN-PERSON & TELEHEALTH STATEWIDE)
OUR COMMITMENT TO YOUR PRIVACY
At MMC Health & Wellness Center, we understand that your medical information is deeply personal. We are committed to protecting your Protected Health Information (PHI). PHI includes individually identifiable health information created or received by our practice regarding your physical or mental health condition, the provision of health care to you, or payment for your health care.
We are required by federal law, including the Health Insurance Portability and Accountability Act (HIPAA), to maintain the privacy and security of your protected health information, provide you with this Notice detailing our legal duties and privacy practices regarding your PHI, notify you promptly if a breach occurs that may have compromised the privacy or security of your unsecured information, and follow the duties and privacy practices described in this Notice for as long as it remains in effect.
HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
Under federal law, we are permitted to use and disclose your PHI without your written authorization for treatment, payment, and healthcare operations:
– Treatment: We use and disclose your PHI to provide, coordinate, or manage your care. Because MMC Health & Wellness operates under a clinician-led, hybrid care model, your primary practitioner will access your health history to conduct in-person consultations in Norwalk or telehealth visits across Connecticut. We may share PHI with external specialists, laboratories, pharmacies, or diagnostic centers involved in your treatment plan.
– Payment: We use and disclose your PHI to bill and collect payment for services rendered. This includes sending billing details to your health insurance carrier, Medicare, or third-party administrators to obtain pre-authorizations or submit claims.
– Healthcare Operations: We use your PHI to support the daily operational activities of our practice. These include conducting internal quality assessment reviews, reviewing practitioner performance, evaluating treatment outcomes, auditing business operations, and maintaining security across our virtual telehealth platforms.
SPECIALIZED PRACTICE AREAS & REQUIREMENTS
For military veterans receiving Compensation & Pension (C&P) disability evaluation services, MMC Health & Wellness acts as an independent medical evaluator. When conducting contracted evaluations, we disclose specialized medical reports and diagnostic findings directly to the designated government agencies, contracting partners, or the Department of Veterans Affairs (VA) as authorized by federal regulations or explicit administrative agreements.
When you connect with us via secure telehealth, encrypted electronic systems transmit video, voice, and medical data. We implement technical safeguards to protect these transmissions. We may also use your contact information to send appointment reminders, lab notifications, or treatment follow-ups via phone, secure text message, or email.
USES AND DISCLOSURES REQUIRING YOUR WRITTEN AUTHORIZATION
For purposes not covered by standard treatment, payment, or operations, we will obtain your explicit written authorization before sharing your PHI. Specifically:
– Marketing: We will never sell your personal information or use your PHI for marketing purposes without your written consent.
– Psychotherapy Notes: Most uses of clinical psychotherapy notes require specific authorization.
– Revocation: If you provide written authorization, you may revoke it at any time in writing, except to the extent that action has already been taken in reliance on it.
PERMITTED DISCLOSURES WITHOUT AUTHORIZATION
State and federal laws allow or require us to disclose your PHI without your consent under specific public interest circumstances:
– Public Health & Safety: To track diseases, report adverse medication reactions, or prevent a serious, imminent threat to public health or safety.
– Abuse or Neglect: To report suspected child or elder abuse or domestic violence to government authorities.
– Judicial & Administrative Proceedings: In response to a valid court order, subpoena, or administrative warrant.
– Law Enforcement & Government: To comply with law enforcement requests, workers’ compensation claims, or national security mandates.
YOUR INDIVIDUAL PRIVACY RIGHTS
When it comes to your health information, you have distinct legal rights:
– Right to Inspect and Copy: You have the right to inspect and obtain an electronic or paper copy of your medical and billing records. We will provide this within 30 days of receiving your written request, subject to reasonable, cost-based reproduction fees.
– Right to Request Restrictions: You may ask us not to use or share certain PHI for treatment, payment, or operations. While we are not required to agree to all requests, we must agree if you request that we not send information to your health plan for a service you paid for entirely out-of-pocket.
– Right to Confidential Communications: You can request that we contact you in a specific way (e.g., cell phone only) or send mail to a designated alternative address. We will accommodate all reasonable requests.
– Right to Amend Records: If you believe your health record is incorrect or incomplete, you may request a written amendment. We may deny your request under specific circumstances, but we will provide a written explanation within 60 days.
– Right to an Accounting of Disclosures: You may request a list of the times we have shared your PHI for reasons other than treatment, payment, or healthcare operations over the past six years.
– Right to a Paper Copy: You have the right to request a physical copy of this Notice at any time, even if you agreed to receive it electronically.
CHANGES TO THIS NOTICE
We reserve the right to revise or update our privacy practices and the terms of this Notice at any time. Revised practices will apply to all existing and future PHI held by our clinic. Updated copies will be posted prominently in our Norwalk clinic office and made available on our website.
FILING A COMPLAINT
If you believe your privacy rights have been violated, you may file a complaint with us directly or with the U.S. Department of Health and Human Services:
MMC Health & Wellness Center Privacy Officer
Norwalk, Connecticut
Email: Provided in the Contact section of the Site
Phone: Provided in the Contact section of the Site
U.S. Department of Health and Human Services
Office for Civil Rights (OCR)
200 Independence Avenue, S.W., Washington, D.C. 20201
We will not retaliate against you in any way for filing a complaint.