HIPAA Compliance & Data Protection

Notice of Privacy Practices

How Medical Information About You May Be Used and Disclosed and How You Can Get Access to This Information

Effective Date: January 1, 2026 | Document Control: NPP-v1.0-2026

This Notice describes our clinic's practices regarding the electronic Protected Health Information (ePHI) collected from our patients in accordance with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Privacy and Security Rules (45 CFR Parts 160 and 164).

01

1. How We May Use and Disclose Your Health Information

For Treatment: We use and disclose your medical and dental history to provide, coordinate, and supervise your clinical care. This includes consultations with other specialized healthcare professionals, dental laboratories, and emergency care providers.

For Payment: We may use and disclose your ePHI to bill and obtain reimbursement from insurance providers, Medicare/Medicaid, CDCP, or other commercial health plans for treatments rendered.

For Healthcare Operations: We utilize clinical information for administrative evaluations, credentialing, quality assessment and improvement activities, staff training, and compliance auditing.

As Required by Law: We will disclose health information about you when mandated to do so by federal, state, or provincial laws, judicial subpoenas, public health investigations, or imminent threat to health or safety.

02

2. Your Rights Regarding Your Health Information

Right to Inspect and Copy: You have the right to inspect and obtain an electronic or paper copy of your medical and billing records. We provide electronic records within statutory timeframes.

Right to Amend: If you believe that clinical records or contact details maintained in our electronic system are inaccurate or incomplete, you may submit a formal request to amend the record.

Right to Request Restrictions: You have the right to request restrictions or limitations on the medical information we use or disclose about you for treatment, payment, or healthcare operations.

Right to an Accounting of Disclosures: You have the right to request an accounting of disclosures made of your ePHI, subject to statutory exceptions such as treatment and payment.

Right to a Paper Copy of This Notice: You are entitled to receive a physical paper copy of this privacy notice at any time upon request at our reception desk.

03

3. Our Legal Duties & Safeguards

UDA Faculty Practice is required by federal and local law to maintain the privacy of protected health information, provide patients with notice of our legal duties and privacy practices, and adhere to the terms of the notice currently in effect.

Technical & Administrative Safeguards: All digital health information is protected using end-to-end encrypted databases, automated session timeouts, and immutable audit logs that record all data access and modifications.

Breach Notification: In the unlikely event of an unauthorized breach of unsecured protected health information, affected patients and regulatory bodies will be promptly notified as required by law.

04

4. Questions & Privacy Complaints

If you have questions regarding this Notice, or if you believe your privacy rights have been violated, you may file a formal complaint with our Privacy Officer or with the Office for Civil Rights (OCR) at the U.S. Department of Health and Human Services (HHS).

We strictly prohibit any form of retaliation against any patient for filing a complaint or exercising privacy rights under HIPAA.

+1 (416) 222-7777