(818) 600-1472

HIPAA Notice of Privacy Practices

Thrive Comprehensive Medical Group

Website: Thrive Comprehensive Medical Group

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Who this notice covers

This notice applies to Thrive Comprehensive Medical Group, our workforce, and our business associates (vendors who help us deliver care, billing, IT, etc.) who are required to protect your information.

Your rights

You have the right to:

  • Get a copy of your medical record. Ask for an electronic or paper copy of your record and other health information. We’ll provide it within 30 days of your request, and may charge a reasonable, cost-based fee. You can direct us to send a copy to another person of your choosing.
  • Ask us to correct (amend) your record. If you think something is wrong or incomplete, ask us to fix it. We may say no, but we’ll explain why in writing within 60 days and let you add a statement of disagreement.
  • Ask for confidential communications. Request that we contact you in a specific way (e.g., at a different address or phone, or via portal). We will say yes to reasonable requests.
  • Ask us to limit what we use or share. You can ask us not to use/share certain information for treatment, payment, or healthcare operations. We’re not required to agree—except when you pay in full out-of-pocket for an item or service and ask us not to share that specific information with your health plan for payment or operations; then we must agree unless law requires otherwise.
  • Get a list of disclosures. Request an accounting of our disclosures of your health information for the 6 years before your request (excluding those for treatment, payment, operations, and certain other routine disclosures). One free list per 12 months; reasonable fees may apply after that.
  • Get a copy of this notice. You can ask for a paper copy at any time, even if you agreed to receive it electronically. It’s also posted at Websiteprivacy.
  • Choose someone to act for you. If you have a medical power of attorney or are a parent/guardian of a minor, that person can exercise your rights when appropriate.
  • File a complaint without retaliation. If you believe your privacy rights have been violated, contact us at {PrivacyOfficerEmail}/{PrivacyOfficerPhone}. You can also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights at https://ocrportal.hhs.gov/ or by mail/phone. We won’t retaliate against you for filing a complaint.
  • Be notified of a breach. We will notify you if a breach occurs that compromises the privacy or security of your information.

Your choices

For certain information, you can tell us your preferences about what we share. If you have a clear preference, tell us and we will follow it.

  • Family, friends, caregivers: We may share relevant information with a person involved in your care or payment if you agree or when you do not object; in an emergency, we may share if it’s in your best interest and permitted by law.
  • Disaster relief: We may share to help in a disaster.
  • Fundraising: We may contact you for fundraising. You can opt out of further fundraising communications at any time. We won’t condition care on your choice.
  • SMS, email, and portal messaging: We use these mainly for appointments/billing and avoid including PHI in SMS. Tell us your communication preferences; you can opt out of non-required texts at any time (e.g., reply STOP to SMS).

We will not sell your information or use it for marketing without your written authorization. We also won’t share psychotherapy notes without your authorization (except as permitted by law).

Our uses and disclosures

We typically use/share your health information in the following ways:

  • Treat you (Treatment). We can use/share your information with other professionals who are treating you. Example: A specialist asks us about your overall health to coordinate care.
  • Run our practice (Healthcare Operations). We can use/share your information to run our practice, improve care, and contact you. Example: Quality improvement, staff training, accreditation.
  • Bill for your services (Payment). We can use/share your information to bill and get payment from health plans or other entities. Example: We send information to your health plan so it will pay for your visit.

Other ways we may use/share your information—as allowed or required by law:

  • Public health & safety: Prevent disease, report adverse events, report abuse/neglect, product recalls, reduce a serious threat to anyone’s health or safety.
  • Health oversight activities: Audits, investigations, inspections, and licensure.
  • Legal actions & law enforcement: Court or administrative orders, subpoenas (with required safeguards), identifying or locating a suspect, missing person, or witness.
  • Medical examiners/coroners/funeral directors; organ and tissue donation.
  • Research: Under strict oversight or with your authorization.
  • Workers’ compensation, disability, and similar programs.
  • Specialized government functions: Military, national security, protective services (when applicable).
  • Compliance with law: If state/federal law requires it.
  • Correctional institutions: If you are in custody, as necessary for your health and the institution’s safety.
  • Immunizations to schools: With your (or guardian’s) agreement where permitted.

Other uses and disclosures require your written authorization. This includes most uses/disclosures of psychotherapy notes, marketing, and sale of health information. If you sign an authorization, you can revoke it at any time (in writing), except to the extent we’ve already acted on it.

Our responsibilities

  • We are required by law to maintain the privacy and security of your protected health information (PHI).
  • We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
  • We must follow the duties and privacy practices described in this notice and give you a copy.
  • We will not use or share your information other than as described here unless you tell us we can in writing. If you give us permission, you can change your mind at any time.

Changes to this notice

We may change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our website at Websiteprivacy with a new effective date.

How to exercise your rights or ask questions

California addendum (CMIA & other state rules)

California law (the Confidentiality of Medical Information Act or CMIA) may offer additional protections:

  • More protective rules may apply to certain sensitive information (e.g., mental health, substance use disorder records under 42 CFR Part 2, HIV test results, genetic test results, reproductive health). We follow the stricter law when it applies.
  • Minor consent: In some cases, minors can consent to their own care. When allowed by law, information may be shared only with the minor’s permission.
  • Out-of-pocket restriction: If you pay in full for a service and request no disclosure to your health plan for that service, we will comply unless law requires otherwise.
  • To learn more or to exercise these state-specific rights, contact helpdesk@thrivecmg.com.

Quick reference (not a substitute for the full notice)

  • We use/share your PHI to treat you, run our practice, and bill for services.
  • You can access/copy, amend, restrict, choose confidential communications, get a disclosure list, get a copy of this notice, and file a complaint.
  • We will not use your information for marketing, sell it, or share psychotherapy notes without your written authorization.
  • We’ll notify you of breaches and follow this notice.