Introduction

ABH Rehab ("we," "our," or "us") is committed to protecting the privacy and confidentiality of all individuals who interact with our treatment center located at 15241 Sunset Blvd, Pacific Palisades, CA 90272. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information and protected health information (PHI) when you visit our facility, use our website, or communicate with our staff.

This policy is designed to comply with the Health Insurance Portability and Accountability Act (HIPAA), the federal regulations under 42 CFR Part 2 governing the confidentiality of substance use disorder patient records, and applicable California state privacy laws.

Information We Collect

We may collect the following types of information when you interact with our treatment center or website:

Personal Information

• Full name, date of birth, and contact information (phone number, email address, mailing address)
• Emergency contact details
• Insurance information and financial data necessary for billing
• Government-issued identification numbers as required for admissions

Protected Health Information (PHI)

• Medical history and current health conditions
• Substance use history and treatment records
• Mental health diagnoses and treatment plans
• Medication records and prescriptions
• Laboratory and diagnostic test results
• Clinical notes, therapy session records, and progress notes
• Discharge summaries and aftercare plans

Website Information

• Information submitted through contact forms on our website
• Browser type, device information, and IP address
• Pages visited and time spent on our website
• Cookies and similar tracking technologies

How We Use Your Information

We use the information we collect for the following purposes:

• Treatment: To provide, coordinate, and manage your care at our facility, including assessments, treatment planning, therapy sessions, and discharge planning
• Payment: To process insurance claims, verify coverage, and manage billing for services provided at our treatment center
• Healthcare Operations: To support the quality of care at our campus, including staff training, quality assurance, and compliance audits
• Communication: To respond to your inquiries, schedule appointments, and provide information about our programs and services
• Legal Compliance: To comply with federal, state, and local laws and regulations

HIPAA Compliance

ABH Rehab complies fully with the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and its implementing regulations. As a covered entity, we maintain administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of your protected health information at our facility.

Under HIPAA, you have the following rights regarding your PHI:

• Right to Access: You may request access to your medical records maintained at our treatment center
• Right to Amend: You may request corrections to your PHI if you believe it is inaccurate or incomplete
• Right to an Accounting of Disclosures: You may request a list of certain disclosures we have made of your PHI
• Right to Request Restrictions: You may request restrictions on how we use or disclose your PHI for treatment, payment, or healthcare operations
• Right to Confidential Communications: You may request that we communicate with you through specific means or at specific locations
• Right to a Copy of This Notice: You may request a paper copy of this Privacy Policy at any time by contacting our facility

42 CFR Part 2 Protections

As a treatment center that provides substance use disorder treatment, ABH Rehab is subject to the federal confidentiality regulations under 42 CFR Part 2. These regulations provide additional protections for substance use disorder patient records beyond those required by HIPAA.

Under 42 CFR Part 2:

• Your substance use disorder treatment records maintained at our facility receive special federal protection
• We cannot disclose information about your treatment to anyone outside our program without your specific written consent, except in limited circumstances permitted by law
• Your records cannot be used to criminally investigate or prosecute you
• Information about your participation in our treatment program at our campus is confidential
• A general medical release form is not sufficient to authorize disclosure of substance use disorder treatment records. A specific 42 CFR Part 2-compliant consent form is required

Permitted disclosures without consent under 42 CFR Part 2 include:

• Medical emergencies where disclosure is necessary to protect the life of the patient or another individual
• Communications between our on-site staff members who need the information to perform their duties
• Reports of suspected child neglect as required by state law
• Court orders that meet specific regulatory requirements
• Qualified audits and evaluations

Disclosure of Information

We will not disclose your personal information or PHI without your authorization, except as described in this policy or as permitted or required by law. Situations in which we may disclose information include:

• When you provide written consent or authorization
• To other healthcare providers involved in your treatment, with appropriate consent
• To your insurance company for payment purposes, with appropriate consent
• As required by law, including mandatory reporting requirements
• To prevent a serious threat to health or safety
• For public health activities as required by law

Data Security

Our treatment center implements comprehensive administrative, physical, and technical safeguards to protect your information, including:

• Encrypted electronic health record systems
• Secure, locked storage for physical records at our facility
• Role-based access controls limiting information access to authorized on-site staff
• Regular security training for all staff members at our campus
• Secure data transmission protocols for electronic communications
• Regular security assessments and audits of our systems
• Business associate agreements with all third-party vendors who may access PHI

Website Privacy

When you visit the ABH Rehab website, we may collect certain non-identifying information automatically, including your browser type, operating system, and browsing behavior. We use this information to improve our website and user experience.

Our website may use cookies to enhance functionality. You can control cookie settings through your browser preferences. Disabling cookies may affect certain features of our website.

Information submitted through our website contact forms is transmitted securely and handled with the same confidentiality as all other communications with our treatment center.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.

Minors

ABH Rehab is committed to protecting the privacy of minors. We comply with all applicable state and federal laws regarding the treatment records of individuals under 18 years of age. Parental or guardian consent is required for the treatment of minors at our facility, except in circumstances permitted by California law.

Data Retention

We retain patient records in accordance with federal and state regulations. Medical records are maintained for the period required by California law and applicable federal regulations. After the required retention period, records are securely destroyed in compliance with HIPAA and 42 CFR Part 2 requirements.

Changes to This Policy

ABH Rehab reserves the right to update this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Significant changes will be communicated through our website or directly to affected individuals as required by law.

Breach Notification

In the event of a breach of unsecured PHI, ABH Rehab will notify affected individuals, the Department of Health and Human Services, and, when required, the media, in accordance with HIPAA breach notification requirements. Notification will be made without unreasonable delay and no later than 60 days following the discovery of the breach.

Complaints

If you believe your privacy rights have been violated, you have the right to file a complaint with our treatment center or with the U.S. Department of Health and Human Services Office for Civil Rights. We will not retaliate against you for filing a complaint.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights regarding your PHI, or have concerns about our privacy practices at our facility, please contact us:

ABH Rehab
Privacy Officer
15241 Sunset Blvd
Pacific Palisades, CA 90272

Phone: (424) 209-6017
Email: [email protected]

Our on-site privacy officer is available during business hours to assist you with any privacy-related questions or requests at our treatment center.