NOTICE OF PRIVACY PRACTICES
Katie Lawrence Counseling, LLC
8735 DUNWOODY PLACE # 6402
ATLANTA, GA 30350
(720) 465-2995
NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW HEALTH INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
I. MY PLEDGE REGARDING HEALTH INFORMATION
Health information about you and your care is personal. I am committed to protecting your protected health information (“PHI”). I create a record of the care and services you receive from me. This record is necessary to provide quality care and to comply with legal requirements.
This Notice applies to all records of your care maintained by Katie Lawrence Counseling, LLC.
I am required by law to:
Maintain the privacy of PHI.
Provide you with this Notice of my legal duties and privacy practices.
Follow the terms of the Notice currently in effect.
Notify you following a breach of unsecured protected health information.
II. HOW I MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
A. Treatment, Payment, and Health Care Operations
Under HIPAA, I may use and disclose your PHI without written authorization for treatment, payment, and health care operations (“TPO”).
Examples include:
Consulting with another provider regarding your care
Coordinating treatment with other health professionals
Submitting claims (if applicable)
Practice management and compliance activities
Disclosures for treatment are not limited to the minimum necessary standard. For payment and health care operations, disclosures will be limited to the minimum necessary information.
B. Lawsuits and Legal Proceedings
I may disclose PHI in response to a court order. A subpoena alone is not sufficient if it does not meet federal and state confidentiality requirements. I may seek to obtain your authorization or a protective order before disclosing information.
III. USES AND DISCLOSURES REQUIRING WRITTEN AUTHORIZATION
The following require your written authorization:
Psychotherapy Notes (as defined by HIPAA), except for limited uses permitted by law.
Marketing purposes.
Sale of PHI.
Any use or disclosure not otherwise described in this Notice.
This practice does not engage in fundraising communications using PHI. You may revoke authorization at any time in writing.
IV. USES AND DISCLOSURES THAT DO NOT REQUIRE AUTHORIZATION
Subject to legal limits, I may disclose PHI without authorization:
When required by law
For mandated reporting (child abuse, elder abuse, disabled adult abuse, or abuse of an at-risk adult as defined by applicable state law)
To prevent a serious and imminent threat to health or safety
For health oversight activities
For judicial or administrative proceedings (with proper legal authority)
For law enforcement in limited circumstances
For workers’ compensation as required by law
For appointment reminders and treatment alternatives
V. SUBSTANCE USE DISORDER RECORDS (42 CFR PART 2)
Certain records received from federally assisted substance use disorder treatment programs are protected by 42 CFR Part 2.
These records may not be used or disclosed without your written consent except as permitted by federal law. You may provide a single written consent allowing use and disclosure for treatment, payment, and health care operations.
Part 2 records may not be used in civil, criminal, administrative, or legislative proceedings against you without your written consent or a court order that complies with federal law. A subpoena alone is not sufficient.
Federal law prohibits unauthorized redisclosure of Part 2–protected records.
Complaints regarding Part 2 or HIPAA violations may be filed with this practice or with the U.S. Department of Health and Human Services, Office for Civil Rights. No retaliation will occur for filing a complaint.
VI. ADDITIONAL STATE LAW CONFIDENTIALITY PROTECTIONS
Because I may provide services in Colorado, Georgia, and South Carolina, state law may provide additional protections beyond HIPAA.
Colorado
Under Colorado law:
· Confidential communications in therapy are protected by statute.
· Disclosure generally requires your consent unless otherwise permitted by law.
· You are entitled to receive information regarding my credentials, training, and licensing authority.
· My practice is regulated by the Colorado Department of Regulatory Agencies (DORA).
· Records are maintained and retained in accordance with Colorado record retention requirements.
Georgia
Under Georgia law:
· Mental health records are confidential and generally require written authorization for disclosure except as permitted by law.
· Disclosures may occur for emergencies, continuity of care, or by court order.
· Access to records is governed by Georgia law in addition to HIPAA.
· Records are maintained and retained in accordance with Georgia record retention requirements
South Carolina
Under South Carolina law:
· Therapy communications and records are confidential and privileged.
· Disclosure generally requires written consent or a court order, except as required by law (e.g., mandated reporting, duty to warn).
· Records are maintained and retained in accordance with South Carolina record retention requirements
When state law is more restrictive than HIPAA, I will follow state law.
VII. MINORS AND PERSONAL REPRESENTATIVES
For minor clients, parents or legal guardians are generally considered personal representatives under HIPAA. However, state law may limit parental access in certain circumstances. I will comply with applicable state law regarding minor consent and confidentiality.
VIII. TELEHEALTH AND ELECTRONIC COMMUNICATION
If services are provided via telehealth, reasonable safeguards are used to protect privacy. Telehealth services are provided using HIPAA-compliant platforms. Where required, Business Associate Agreements are maintained with technology vendors. However, electronic communications carry inherent risks. By participating in telehealth, you acknowledge those risks.
IX. YOUR RIGHTS REGARDING PHI
You have the right to:
Request restrictions on certain uses or disclosures
Request confidential communications
Inspect and obtain a copy of your record (excluding psychotherapy notes)
Request amendment of your record
Receive an accounting of certain disclosures
Obtain a paper or electronic copy of this Notice
Obtain an electronic copy of your PHI if maintained electronically.
Requests must be made in writing.
X. RECORD RETENTION
Records are retained in accordance with applicable federal and state law. Records are not automatically destroyed upon termination of therapy. Records are kept for a minimum of 7 years after termination of therapy in Colorado and Georgia, and 10 years in South Carolina. For minors in Colorado, records may be retained for 7 years after the minor reaches age 18. After the legally required retention period, records may be securely destroyed.
XI. COMPLAINTS
If you believe your privacy rights have been violated, you may file a complaint with:
Katie Lawrence Counseling, LLC
Privacy Contact:
Katie Lawrence, Owner
(720) 465-2995
Katie@KatieLawrenceCounseling.comU.S. Department of Health and Human Services, Office for Civil Rights
The applicable state licensing board:
· Colorado: Department of Regulatory Agencies (DORA), Mental Health Licensing Section
o
1560 Broadway, Suite 1350
Denver, CO 80202
Phone: 303-894-7800
Website: https://dpo.colorado.gov
Georgia: Georgia Board of Professional Counselors, Social Workers, and Marriage & Family Therapists
3920 Arkwright Rd., Suite 19
Macon, Ga 31210
Website: https://sos.ga.gov/
South Carolina: South Carolina Board of Examiners for Licensed Professional Counselors, Marriage and Family Therapists, and Psycho-Educational Specialists
110 Centerview Dr.
Columbia, SC 29210
Website: https://llr.sc.gov/
You will not be retaliated against for filing a complaint.
I reserve the right to revise this Notice. Revisions will apply to all PHI I maintain.
This notice is effective as of February 16, 2026.