HIPAA NOTICE OF PRIVACY PRACTICES
Your Information. Your Rights. Our Responsibilities.
Effective Date: 08/16/2026
This notice describes how medical and mental health information about you may be used and disclosed and how you can obtain access to that information.
Vermillion Skies is required by law to protect the privacy of your protected health information (PHI), provide you with this notice describing our privacy practices and legal duties, and follow the terms of the notice currently in effect.
HHS’s current model notice specifically recognizes that covered healthcare providers must explain individuals’ rights and the provider’s privacy practices, and the February 2026 revisions incorporate requirements concerning Part 2 substance-use-disorder records.
Your Rights:
You have the right to:
Obtain a Copy of Your Health Information
You may request access to your health information and request a copy of your clinical record, subject to applicable legal limitations.
Request a Correction
You may request that we correct information you believe is inaccurate or incomplete. We may deny a request when permitted by law.
Request Confidential Communications
You may ask us to contact you in a particular way or at a particular location.
Request Restrictions
You may request that we limit how we use or disclose your information.
We are not required to agree to every restriction request, except where applicable law requires us to do so.
Request an Accounting of Disclosures
You may request information about certain disclosures of your PHI, subject to applicable legal exceptions.
Receive a Copy of This Notice
You may request a paper or electronic copy of this notice at any time.
Choose Someone to Act for You
If another person has legal authority to act as your personal representative, that person may exercise applicable rights on your behalf.
File a Complaint
You may file a complaint with Vermillion Skies or with the U.S. Department of Health and Human Services Office for Civil Rights.
You will not be retaliated against for filing a complaint.
How We May Use and Disclose Your Information:
We may use or disclose PHI without your written authorization when permitted or required by law.
Treatment
We may use or disclose information to provide, coordinate, or manage your mental health treatment.
Payment
We may use information to obtain payment for services, including communicating with insurers when applicable.
Health Care Operations
We may use information for practice management, quality improvement, credentialing, training, administrative functions, and other permitted healthcare operations.
Required by Law
We may disclose information when required by federal, state, or local law.
Public Health
We may disclose information for certain legally authorized public-health purposes.
Abuse, Neglect, or Exploitation
We may disclose information when required or permitted by law concerning suspected abuse, neglect, or exploitation.
Serious Threats to Health or Safety
We may disclose information when necessary to prevent or lessen a serious and imminent threat to health or safety, when permitted by law.
Judicial and Administrative Proceedings
We may disclose information when legally authorized in connection with court or administrative proceedings.
Law Enforcement
We may disclose information to law enforcement when permitted or required by applicable law.
Workers’ Compensation
We may disclose information as authorized by workers’ compensation laws.
Psychotherapy Notes
Psychotherapy notes maintained separately from the clinical record may receive additional protection under HIPAA. In circumstances where authorization is required, we will obtain the appropriate authorization before disclosing such notes.
Substance Use Disorder Records
Certain substance-use-disorder records may receive additional federal protection under 42 CFR Part 2.
Where Part 2 applies, Vermillion Skies will comply with applicable federal requirements governing the use and disclosure of those records. The current federal rules require covered entities that create or maintain Part 2 records to address those records in their privacy notices.
Uses Requiring Authorization
Except where otherwise permitted or required by law, we will obtain your written authorization before using or disclosing PHI for purposes requiring authorization.
You may revoke an authorization in writing at any time, subject to actions already taken in reliance upon the authorization.
Marketing and Sale of Information
We will not use or disclose your PHI for marketing purposes or sell your PHI when an authorization is required by law.
Our Responsibilities
Vermillion Skies will:
Maintain the privacy and security of your PHI.
Provide you with this notice.
Follow the terms of the notice currently in effect.
Notify affected individuals as required by law if a breach occurs.
Comply with applicable federal and Arizona privacy requirements.
Changes to This Notice
We reserve the right to change this notice. Any revised notice will apply to information we maintain, subject to applicable law.
The current notice will be available on our website and upon request.
Privacy Contact
Andrew B. Canvasser, LCSW
Vermillion Skies Mental Health
(702)518-5714
vermillionskiesmentalhealth@gmail.com