Notice of Privacy Practices

Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your protected health information (PHI).
• Provide you with this Notice of our legal duties and privacy practices.
• Notify you in the event of a breach that may compromise the privacy or security of your information.
• Abide by the terms of this Notice currently in effect.

Your Rights

You have the right to:

• Get an electronic or paper copy of your medical record.
• Ask us to correct your medical record if you believe it is incorrect or incomplete.
• Request confidential communications (e.g., contact you at a specific phone number or address).
• Ask us to limit what we use or share for treatment, payment, or operations.
• Receive a list (accounting) of disclosures we've made of your information.
• Get a paper copy of this Notice at any time.
• Choose someone to act for you, such as a medical power of attorney or legal guardian.
• File a complaint if you believe your privacy rights have been violated.

How We May Use and Disclose Your Health Information

We typically use or share your health information in the following ways:

1. Treatment

We may use your PHI and share it with other professionals involved in your care.
Example: Sharing results with your referring physician.

2. Payment

We may use and share your PHI to bill and receive payment from your health plan or other entities.
Example: Submitting information to your insurance provider for reimbursement.

3. Health Care Operations

We may use and share your PHI for operational purposes necessary to run our practice and improve your care.
Example: Reviewing the quality of care provided or training staff.

4. Use of Business Associates and Patient Communications

We may share your PHI with business associates — third-party service providers who assist with functions such as billing, scheduling, IT, marketing support, and patient communications. These entities are contractually obligated to protect your information under HIPAA regulations.

We may also contact you for administrative or follow-up purposes such as appointment reminders, review requests, or to ask for feedback about your visit. These messages will not include specific health information and are used solely to support your care and enhance the experience with our practice.

We will not sell your PHI or use it for third-party marketing without your written authorization, except as permitted by law for our own services.

Other Permitted or Required Uses and Disclosures

We are allowed or required to share your information in other ways — usually in ways that contribute to the public good. These include:

• Public health activities (e.g., reporting diseases, adverse events)
• Health oversight (e.g., audits, inspections)
• Legal proceedings and law enforcement (in response to court orders or legal processes)
• Organ and tissue donation
• Medical examiners or funeral directors
• Workers' compensation claims
• Military and veterans' affairs (if applicable)
• National security or protective services
• Complying with federal or state law

Marketing and Fundraising

We may contact you to provide information about our services. We will never share your PHI for third-party marketing purposes or fundraising without your written authorization.

Our Duty to Protect Your Privacy

We are committed to protecting your health information. All employees, staff, and business associates of Rheumatology and Endocrinology Specialists of the Palm Beaches, P.A. are trained in the protection of PHI and are required to adhere to strict confidentiality and security standards.

Changes to This Notice

We reserve the right to change this Notice and apply those changes to previously collected information. Any updates will be available at our office and on our website. You may request a copy of the current Notice at any time.

Questions or Complaints

If you have questions or believe your rights have been violated, you may contact our Privacy Officer at:

Privacy Officer
Rheumatology and Endocrinology Specialists of the Palm Beaches, P.A.
5155 Corporate Way, Suite C, Jupiter, FL 33458
Phone: (561) 932-1212 · Email: info@barronmd360.com

You may also file a complaint with the U.S. Department of Health and Human Services: www.hhs.gov/ocr/privacy/hipaa/complaints/

We will not retaliate against you for filing a complaint.