Privacy Practices:
Our Responsibilities

• We are required by law to maintain the privacy and security of your protected health
  information.

• We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information. We will also notify the attorney General and the Director of Consumer Affairs and Business Regulation (OCABR).

• We must follow the duties and privacy practices described in this notice and give you a copy of it.

• We will not use or share your information other than as described in this notice unless you tell us we can in writing. If you tell us we can, you may change your mind at any time. Let us know in writing if you change your mind.

• Date Protection Standards (201 CMR 17.00): This regulation mandates that any entity owning or licensing personal information of Massachusetts residents must implement comprehensive security, safeguarding both paper and electronic. We store all PHI on an electronic health record system called Therapy Notes.

For more information see: www.hhs.gov/ocr/privacy/hipaa/understanding/consumers/noticepp.html.

Changes to the Terms of this Notice

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon request, in our office, and on our web site.