PHX Recovery is required by law to keep all protected healthcare information private. (Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), 42U.S.C. & 1320d et seq., 45 C.F.R. Parts 160 & 164, and the Confidentiality Law, 42U.S.C & 290dd-2, 42 C.F.R. Part 2.)

PHX Recovery will not disclose your private healthcare information to anyone outside of the organization without written permission from you. You may sign a Release of Information(ROI) if you wish for PHX Recovery to share your information with another healthcare provider or entity.

Federal Law does allow PHX Recovery to share information in some of the following instances:

• During a medical emergency.
• During an official audit or evaluation.
• If a crime has been committed on PHX Recovery property.
• To report child abuse or neglect.
• If there is a court order.
• Pursuant to an organization that has a signed BAA (Business Associate Agreement) with PHX Recovery.

What are my rights?

You have the right to access your own personal healthcare information upon request.

You have the right to restrict or deny how PHX Recovery uses your private healthcare information.

You have the right to complain to PHX Recovery or the Secretary of the United States Health and Human services without retaliation.

How do I make a complaint?

If you believe that your privacy rights have been violated under HIPAA, you may file a complaint with the Secretary of the United States Department of Health and Human Services.

If you believe that your privacy rights have been violated under the confidentiality law, you may file a complaint with the United States Attorney in the district where the violation occurred.

Who can I contact with questions or concerns about PHX Recovery’s privacy policy?

Any questions or concerns regarding PHX Recovery’s privacy policy can be directed to PHX Admin.