HIPAA Notice

(Formal Notice of Privacy Practices – Required by Law)

Effective Date: January 1, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION.

PLEASE REVIEW IT CAREFULLY.

‍

1. OUR LEGAL DUTY

Heart & Vascular Care of Georgia (“the Practice”) is required by law to:

• Maintain the privacy and security of your Protected Health Information (PHI)
• Provide you with this Notice of our legal duties and privacy practices
• Follow the terms of this Notice currently in effect
• Notify you in the event of a breach of unsecured PHI

This Notice applies to all PHI created, received, or maintained by the Practice, including information created by physicians, staff, and business associates acting on our behalf.

Authority: HIPAA Privacy Rule, 45 CFR §164.520

2. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your cardiovascular care. This includes sharing information with healthcare professionals involved in your treatment, referrals, diagnostics, or follow-up care.

Payment

We may use and disclose PHI to bill and collect payment for services, including insurance verification, claims processing, eligibility checks, prior authorizations, appeals, and collections.

Healthcare Operations

We may use PHI for operational purposes such as quality improvement, audits, compliance activities, training, credentialing, and practice management.

3. OTHER PERMITTED OR REQUIRED DISCLOSURES

We may disclose PHI without your authorization when permitted or required by law, including for:

• Public health activities
• Health oversight activities
• Legal proceedings and law enforcement requests
• Preventing a serious threat to health or safety
• Workers’ compensation claims
• Coroners, medical examiners, and funeral directors
• Research, under legally approved conditions

4. USES AND DISCLOSURES REQUIRING AUTHORIZATION

We will not use or disclose your PHI without your written authorization for:

• Marketing purposes
• Sale of PHI

You may revoke an authorization in writing at any time, except where action has already been taken.

5. YOUR RIGHTS

You have the right to:

• Access and obtain copies of your medical records
• Request corrections or amendments
• Request restrictions on certain uses or disclosures
• Receive confidential communications
• Receive an accounting of certain disclosures
• Obtain a paper or electronic copy of this Notice

6. ELECTRONIC COMMUNICATIONS & PATIENT PORTAL

We use secure electronic systems, including the healow patient portal, to communicate with patients and provide access to health information.

Use of electronic communication is voluntary and subject to inherent risks despite reasonable safeguards.

7. CHANGES TO THIS NOTICE

We reserve the right to change this Notice and apply the revised terms to all PHI we maintain. Updated Notices will be made available on our website and upon request.

8. COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with:

• Our Privacy Officer, or
• The U.S. Department of Health and Human Services

You will not be retaliated against for filing a complaint.

‍