Privacy Policy

OUR COMMITMENT TO YOUR PRIVACY 

Steadfast Health is committed to protecting the privacy and confidentiality of your health information. 

 

We maintain records about your health condition, the care and services you receive, and payment for those services. This information is called Protected Health Information (PHI). 

Your information is protected by: 

  • The Health Insurance Portability and Accountability Act (HIPAA) 
  • Federal substance use disorder confidentiality law (42 U.S.C. §290dd-2) 
  • Federal regulations governing SUD records (42 CFR Part 2) 

We are required by law to: 

  • Maintain the privacy and security of your health information 
  • Provide you with this Notice explaining our privacy practices 
  • Follow the terms of this Notice 
  • Notify you if a breach of your unsecured health information occurs 

 

CONFIDENTIALITY OF SUBSTANCE USE DISORDER TREATMENT RECORDS 

Information that identifies you as having or having had a substance use disorder diagnosis, treatment, or referral for treatment is protected by federal law. 

Generally, we may not disclose this information without your written consent unless an exception under federal law applies. 

Federal law prohibits unauthorized use or disclosure of these records. 

Violations may result in civil and criminal penalties. 

 

HOW WE MAY USE AND DISCLOSE YOUR INFORMATION 

We may use and disclose your information with your consent for the following purposes. 

 

  1. TREATMENT

We may use or disclose your information to provide, coordinate, or manage your care. 

Examples include: 

  • Communication between clinicians involved in your care 
  • Referrals to other treatment providers 
  • Coordinating services with hospitals or specialists 

 

  1. PAYMENT

We may use or disclose information to obtain payment for services provided. 

Examples include: 

  • Submitting claims to health insurers 
  • Verifying coverage 
  • Billing and collections 

 

  1. HEALTH CARE OPERATIONS

We may use your information for operations necessary to run our organization. 

Examples include: 

  • Quality improvement 
  • Staff training 
  • Licensing and accreditation 
  • Compliance activities 
  • Business planning and management 

 

You may provide a single consent for all future uses or disclosures for treatment, payment, and health care operations purposes. 

 

  1. PROCEEDINGS AGAINST YOU 

 

Except where required by a court order, any use or disclosure of your Part 2 records, or testimony relaying the content of such records, in any civil, administrative, criminal, or legislative proceedings against you requires your written consent. Your consent for this purpose must be separate from your consent for any other use or disclosure. 

 

  1. PRESCRIPTION DRUG MONITORING PROGRAMS

 

We may report any medication prescribed or dispensed by the program to the applicable state prescription drug monitoring program (“PDMP”) if required by applicable state law. 

 

REDISCLOSURE OF INFORMATION 

When information is disclosed with your consent for treatment, payment, or health care operations: 

  • The recipient may redisclose the information in accordance with HIPAA regulations, unless otherwise restricted by law. 

However, federal law continues to protect your substance use disorder records from unauthorized use or disclosure. 

 

OTHER PERMITTED USES AND DISCLOSURES 

We may disclose your information without your consent in limited situations allowed by law, including: 

  • Internal Treatment 
  • To communicate among staff members within any Part 2 programs affiliated with the facility who have a need for the information in connection with their duties to provide diagnosis, treatment, or referral for treatment 
  • With our Contractors 
  • We may share your information with business associates or contractors who perform services on our behalf to operate our program. All business associates and contractors are required to protect your information and use it only for authorized purposes within the limits of the law. 
  • Medical Emergencies 
  • We may disclose information disclosed to medical personnel to treat a medical emergency. 
  • Public Health Activities 
  • We may disclose information to public health authorities as required by law. 
  • Court Orders 
  • We may disclose information in response to a valid court order that complies with 42 CFR Part 2 requirements. 
  • Crimes on Program Premises 
  • We may disclose information related to a crime committed on the program’s premises or against program personnel to law enforcement. 
  • Child Abuse and Neglect Reporting 
  • We may report suspected abuse or neglect as required by law. 
  • Audits and Evaluations 
  • We may disclose information to government agencies conducting oversight or evaluation of programs. 
  • Research 
  • Your information may be used or disclosed for approved research under strict confidentiality protections. 
  • Coroners and Medical Examiners 
  • We may disclose information related to cause of death when authorized by law. 

 

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION 

You have the following rights: 

 

Right to Inspect and Obtain Copies 

You have the right to see or obtain an electronic or paper copy of your medical record and other health information we have about you. You must submit your request in writing to the below Steadfast Head of Compliance. We will provide a copy or a summary of your medical record, usually within 30 days of your request. We may charge a reasonable, cost-based fee for providing you a copy of your medical record.  

 

Right to Amend Records 

If you feel that information in your medical record is incorrect or incomplete, you may ask us to amend the information. To request an amendment, your request must be made in writing and submitted to Steadfast’s Head of Compliance. We will respond to your request within 60 days. In certain circumstances, we may deny your request for an amendment. Our written denial will state the reasons for the denial and explain your right to file awritten statement of disagreement with the denial. If you choose not to file a written statement of disagreement, you have the right to ask that your request and our denial be attached to all future disclosures of your PHI.  

 

Right to an Accounting of Disclosures 

You may request a list of certain disclosures of your health information made by our program. This accounting will include disclosures required by law. 

 

Right to Request Restrictions 

You may request limits on how your information is used or disclosed. We are not required to agree to all requests, but we will comply with any restriction we approve. 

 

Right to Confidential Communications 

You may request that we contact you in a specific way or at a specific location. We will accommodate reasonable requests. 

 

Right to Breach Notification 

You have the right to be notified if your unsecured health information is breached. 

 

RIGHT TO FILE A COMPLAINT 

If you believe your privacy rights have been violated, you may file a complaint. 

You may file a complaint with: 

Head of Compliance  
(P): (954) 994-7432 

(E): compliance@steadfasthealth.com 

 

Or with: 

 

U.S. Department of Health and Human Services 
Office for Civil Rights 
200 Independence Avenue SW 
Washington, DC 20201 

Phone: 877-696-6775 
Website: www.hhs.gov/ocr 

You will not be retaliated against for filing a complaint. 

 

NON-DISCRIMINATION 

Federal law prohibits discrimination against individuals receiving substance use disorder treatment. 

Your information cannot be used to discriminate against you in: 

  • employment 
  • housing 
  • access to benefits 
  • court proceedings 
  • social services 

“SMS / Text Message Communications”

SMS / Text Message Communications

Steadfast Health offers patients the option to receive healthcare-related communications by SMS text message. This section describes how we collect and use mobile information in connection with that service.

How we collect mobile information. We collect your mobile telephone number only when you voluntarily provide it and affirmatively consent to receive text messages, which you do by completing and signing our Patient Consent for Communications form during the intake process. Consent is voluntary and is not a condition of receiving treatment or any other service.

How we use mobile information. We use your mobile telephone number solely to send healthcare-related text messages relating to patient outreach, care coordination, appointment scheduling, and follow-up communications. Message frequency varies based on your care needs and appointments. Message and data rates may apply. You may reply STOP at any time to unsubscribe, or HELP for assistance.

No sharing for marketing. Steadfast Health will not share, sell, rent, or otherwise disclose your mobile opt-in information or mobile telephone number with any third party for marketing or promotional purposes. Mobile information may be shared only with service providers acting on our behalf under a Business Associate Agreement, or as otherwise required or permitted by law, consistent with this Notice and the confidentiality protections of HIPAA and 42 CFR Part 2.

Withdrawing consent. You may withdraw your consent to receive text messages at any time by replying STOP to any message or by contacting Steadfast Health. Withdrawal of consent will not affect your right to receive treatment.

CHANGES TO THIS NOTICE 

We reserve the right to change this Notice. If changes occur, the revised Notice will apply to all information we maintain. The updated Notice will be available: 

  • At our facility 
  • On our website 
  • Upon request