NOTICE OF PRIVACY PRACTICES​

Katie Lawrence Counseling, LLC

8735 DUNWOODY PLACE # 6402

ATLANTA, GA 30350

(720) 465-2995

NOTICE OF PRIVACY PRACTICES

THIS NOTICE DESCRIBES HOW HEALTH INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

I. MY PLEDGE REGARDING HEALTH INFORMATION

Health information about you and your care is personal. I am committed to protecting your protected health information (“PHI”). I create a record of the care and services you receive from me. This record is necessary to provide quality care and to comply with legal requirements.

This Notice applies to all records of your care maintained by Katie Lawrence Counseling, LLC.

I am required by law to:

  • Maintain the privacy of PHI.

  • Provide you with this Notice of my legal duties and privacy practices.

  • Follow the terms of the Notice currently in effect.

  • Notify you following a breach of unsecured protected health information.

  • Provide you with adequate notice of your rights and my legal duties if I create or maintain records protected by 42 CFR Part 2.

II. HOW I MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

A. Treatment, Payment, and Health Care Operations

Under HIPAA, I may use and disclose your PHI without written authorization for treatment, payment, and health care operations (“TPO”).

Examples include:

  • Consulting with another provider regarding your care

  • Coordinating treatment with other health professionals

  • Submitting claims (if applicable)

  • Practice management and compliance activities

Disclosures for treatment are not limited to the minimum necessary standard. For payment and health care operations, disclosures will be limited to the minimum necessary information.

B. Lawsuits and Legal Proceedings

I may disclose PHI in response to a court order. A subpoena alone is not sufficient if it does not meet federal and state confidentiality requirements. I may seek to obtain your authorization or a protective order before disclosing information.

III. USES AND DISCLOSURES REQUIRING WRITTEN AUTHORIZATION

The following require your written authorization:

  1. Psychotherapy Notes (as defined by HIPAA), except for limited uses permitted by law. I do keep “psychotherapy notes” as that term is defined in 45 CFR § 164.501, and any use or disclosure of such notes requires your authorization unless the use or disclosure is:

  2. For my use in treating you.

  3. For my use in training or supervising mental health practitioners to help them improve their skills in group, joint, family, or individual counseling or therapy.

  4. For my use in defending myself in legal proceedings instituted by you.

  5. For use by the Secretary of Health and Human Services to investigate my compliance with HIPAA.

  6. Required by law and the use or disclosure is limited to the requirements of such law.

  7. Required by law for certain health oversight activities pertaining to the originator of the psychotherapy notes.

  8. Required by a coroner who is performing duties authorized by law.

  9. Required to help avert a serious threat to the health and safety of others.

2.       Substance Use Disorder (SUD) Counseling Notes. I may also maintain “SUD counseling notes,” which are notes recorded by a substance use disorder provider documenting the contents of a counseling session. Any use or disclosure of these notes requires your separate written authorization, which cannot be combined with a consent for other types of records. You can revoke your consent at any time except to the extent that I have already acted upon it to disclose these notes in accordance with your initial authorization.

  1. Marketing purposes.

  2. Sale of PHI.

  3. Any use or disclosure not otherwise described in this Notice.

This practice does not engage in fundraising communications using PHI. You may revoke authorization at any time in writing.

IV. USES AND DISCLOSURES THAT DO NOT REQUIRE AUTHORIZATION

Subject to legal limits, I may disclose PHI without authorization:

  • When required by law

  • For mandated reporting (child abuse, elder abuse, disabled adult abuse, or abuse of an at-risk adult as defined by applicable state law)

  • To prevent a serious and imminent threat to health or safety

  • For health oversight activities

  • To coroners or medical examiners

  • For judicial and administrative proceedings, including responding to a court or administrative order, although my preference is to obtain an Authorization from you before doing so.

  • For law enforcement in limited circumstances

  • For workers’ compensation as required by law

  • For appointment reminders and treatment alternatives

Unless you object, I may disclose relevant information to a family member, friend, or other person involved in your care or payment for your care when appropriate.

V. SUBSTANCE USE DISORDER RECORDS (42 CFR PART 2)

  1. Certain records received from federally assisted substance use disorder treatment programs are protected by 42 CFR Part 2.

  2. These records may not be used or disclosed without your written consent except as permitted by federal law. You may provide a single written consent allowing use and disclosure for treatment, payment, and health care operations.

  3. Part 2 records may not be used in civil, criminal, administrative, or legislative proceedings against you without your written consent or a court order that complies with federal law. A subpoena alone is not sufficient.

  4. Federal law prohibits unauthorized redisclosure of Part 2–protected records.

  5. Complaints regarding Part 2 or HIPAA violations may be filed with this practice or with the U.S. Department of Health and Human Services, Office for Civil Rights. No retaliation will occur for filing a complaint.

VI. ADDITIONAL STATE LAW CONFIDENTIALITY PROTECTIONS

Because I may provide services in Colorado, Georgia, and South Carolina, state law may provide additional protections beyond HIPAA.

Colorado

Under Colorado law:

· Confidential communications in therapy are protected by statute.

· Disclosure generally requires your consent unless otherwise permitted by law.

· You are entitled to receive information regarding my credentials, training, and licensing authority.

· My practice is regulated by the Colorado Department of Regulatory Agencies (DORA).

· Records are maintained and retained in accordance with Colorado record retention requirements.

Georgia

Under Georgia law:

· Mental health records are confidential and generally require written authorization for disclosure except as permitted by law.

· Disclosures may occur for emergencies, continuity of care, or by court order.

· Access to records is governed by Georgia law in addition to HIPAA.

· Records are maintained and retained in accordance with Georgia record retention requirements

South Carolina

Under South Carolina law:

· Therapy communications and records are confidential and privileged.

· Disclosure generally requires written consent or a court order, except as required by law (e.g., mandated reporting, duty to warn).

· Records are maintained and retained in accordance with South Carolina record retention requirements

When state law is more restrictive than HIPAA, I will follow state law.

VII. MINORS AND PERSONAL REPRESENTATIVES

For minor clients, parents or legal guardians are generally considered personal representatives under HIPAA. However, state law may limit parental access in certain circumstances. I will comply with applicable state law regarding minor consent and confidentiality.

VIII. TELEHEALTH AND ELECTRONIC COMMUNICATION

If services are provided via telehealth, reasonable safeguards are used to protect privacy. Telehealth services are provided using HIPAA-compliant platforms. Where required, Business Associate Agreements are maintained with technology vendors. However, electronic communications carry inherent risks. By participating in telehealth, you acknowledge those risks.

IX. YOUR RIGHTS REGARDING PHI

You have the right to:

  • Request limits on uses and disclosures of Your PHI. You have the right to ask me not to use or disclose certain PHI for treatment, payment, or health care operations purposes. I am not required to agree to your request, and I may say “no” if I believe it would affect your health care.

  • Request restrictions for out-of-pocket expenses paid for in full. You have the right to request restrictions on disclosures of your PHI to health plans for payment or health care operations purposes if the PHI pertains solely to a health care item or a health care service that you have paid for out-of-pocket in full.

  • Choose How I Send PHI to You. You have the right to ask me to contact you in a specific way (for example, home or office phone), or to send mail to a different address, and I will agree to all reasonable requests.

  • Inspect and obtain a copy of your record (excluding psychotherapy notes and “SUD counseling notes”). I will provide you with a copy of your record, or a summary of it, if you agree to receive a summary, within 30 days of receiving your written request, and I may charge a reasonable, cost-based fee for doing so.

  • Request amendment of your record. If you believe that there is a mistake in your PHI, or that a piece of important information is missing from your PHI, you have the right to request that I correct the existing information or add the missing information. I may say “no” to your request, but I will tell you why in writing within 60 days of receiving your request.

  • Obtain a list of the disclosures I have made. You have the right to request a list of instances in which I have disclosed your PHI for purposes other than treatment, payment, or health care operations, or for which you provided me with an Authorization. I will respond to your request for an accounting of disclosures within 60 days of receiving your request. The list I will give you will include disclosures made in the last six years unless you request a shorter time. I will provide the list to you at no charge, but if you make more than one request in the same year, I will charge you a reasonable cost-based fee for each additional request. You also have the right to request an accounting of disclosures specifically for your substance use disorder records protected under 42 C.F.R. Part 2.

  • Correct or Update Your PHI. If you believe that there is a mistake in your PHI, or that a piece of important information is missing from your PHI, you have the right to request that I correct the existing information or add the missing information. I may say “no” to your request, but I will tell you why in writing within 60 days of receiving your request.

  • Obtain a paper or electronic copy of this Notice

  • Obtain an electronic copy of your PHI if maintained electronically.

Requests must be made in writing.

X. RECORD RETENTION

Records are retained in accordance with applicable federal and state law. Records are not automatically destroyed upon termination of therapy. After the legally required retention period, records may be securely destroyed.

XI. COMPLAINTS

If you believe your privacy rights have been violated, you may file a complaint with:

  • Katie Lawrence Counseling, LLC

  • U.S. Department of Health and Human Services, Office for Civil Rights

  • The applicable state licensing board:

· Colorado: Department of Regulatory Agencies (DORA), Mental Health Licensing Section
1560 Broadway, Suite 1350
Denver, CO 80202
Phone: 303-894-7800
Website: https://dpo.colorado.gov

· Georgia: Georgia Board of Professional Counselors, Social Workers, and Marriage & Family Therapists

3920 Arkwright Rd., Suite 195

Macon, Ga 31210

Website: https://sos.ga.gov/

· South Carolina: South Carolina Board of Examiners for Licensed Professional Counselors, Marriage and Family Therapists, and Psycho-Educational Specialists

110 Centerview Dr.

Columbia, SC 29210

Website: https://llr.sc.gov/

You will not be retaliated against for filing a complaint.

ACKNOWLEDGEMENT

I reserve the right to revise this Notice. Revisions will apply to all PHI I maintain. This notice is effective as of July 1, 2026.