Notice of Privacy Practices

This Notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Who we are

This Notice applies to NextGen Concierge Medicine (“NextGen,” “we,” “us,” “our”) and to all physicians and healthcare professionals furnishing services on our behalf.

Our responsibilities

We are required by law (HIPAA) to maintain the privacy and security of your protected health information (“PHI”).
We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.
We must follow the duties and privacy practices described in this Notice and give you a copy upon request.
We will not use or disclose your information other than as described here unless you authorize us in writing.

How we may use and disclose your information

HIPAA allows us to use and share your PHI in the following ways without your written authorization:

For treatment

To provide, coordinate, or manage your healthcare and related services. Example: sharing information with specialists, laboratories, pharmacies, or other providers involved in your care.

For payment

To obtain payment for services, determine coverage, or bill and collect from you or a third party. Example: sending claims to your health plan, verifying benefits, or obtaining preauthorizations.

For healthcare operations

For activities necessary to operate and improve our practice. Examples: quality assessment, care coordination, training, credentialing, auditing, legal, and administrative services.

Individuals involved in your care & notifications

We may share relevant information with a family member, friend, or other person you identify as involved in your care, and we may use your information to notify them of your location, general condition, or death, when appropriate and permitted by law.

Appointment reminders and communications

We may contact you by phone, email, text message, mail, or patient portal with reminders, care instructions, results notifications, and other non-marketing communications. Message/data rates may apply. You may request alternative reasonable means of communication (see “Your rights”).

Public interest and other permitted disclosures

We may also use or disclose PHI as allowed or required by law, including:

Public health and safety activities (e.g., reporting certain diseases, adverse events, product recalls).
Reporting suspected abuse, neglect, or domestic violence.
Health oversight activities (e.g., audits, inspections, licensure).
Judicial and administrative proceedings and law enforcement purposes (e.g., court orders, warrants).
To medical examiners, coroners, or funeral directors.
For organ or tissue donation.
For research approved by an Institutional Review Board or privacy board, or with your authorization.
To avert a serious threat to health or safety.
Specialized government functions (e.g., military, national security) as permitted.
Workers’ compensation or similar programs, as authorized by law.

Limited data set & de-identified data

We may use and disclose information that has been de-identified or is part of a limited data set (with direct identifiers removed) for research, public health, or healthcare operations, subject to required agreements.

Uses and disclosures requiring your written authorization

Other uses and disclosures not described in this Notice will be made only with your written authorization, including most:

Marketing communications that are not face-to-face and not about your own treatment or care coordination.
Sale of PHI.
Psychotherapy notes (to the extent we maintain them as defined by HIPAA).

You may revoke an authorization at any time in writing, except to the extent we have already relied on it.

Your rights

When it comes to your PHI, you have certain rights. You may exercise these rights by emailing us at info@ngcmedicine.com.

Right to inspect and get a copy of your PHI in paper or electronic form, with limited exceptions. We will provide a copy or summary within a reasonable time and may charge a reasonable, cost-based fee.
Right to request amendments to your record if you believe information is incorrect or incomplete. We may deny your request in certain cases, but we’ll tell you why in writing.
Right to an accounting of disclosures of your PHI for six years prior to your request, excluding disclosures for treatment, payment, and operations and certain other exclusions.
Right to request restrictions on how we use/share your PHI for treatment, payment, or operations. While we are not required to agree, we will comply with a restriction for disclosures to a health plan if you pay out-of-pocket in full for a service and request that we not share that service’s PHI with the plan (unless required by law).
Right to request confidential communications (e.g., contact you at a different email/phone or through the portal). We will accommodate reasonable requests.
Right to a paper copy of this Notice, even if you received it electronically.
Right to choose a personal representative with the legal authority to act for you regarding your health information.

Our concierge communications

Because our practice offers enhanced access (phone, email, text, portal), please be aware that email and SMS may carry privacy risks. By choosing to use them, you accept these risks. We encourage use of our HIPAA-secure portal whenever possible.

Fundraising

If we contact you for a permissible fundraising effort, you can choose not to receive further fundraising communications.

Changes to this Notice

We may change this Notice and the changes will apply to all information we maintain, including information created before the change. When we make significant changes, we will post the revised Notice on the Site with a new effective date and make it available upon request.

Questions or complaints

If you have questions about this Notice or believe your privacy rights have been violated, contact us at info@ngcmedicine.com. You can also file a complaint with the Office for Civil Rights, U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

Acknowledgment of receipt

You may be asked to sign a separate form acknowledging that you received this Notice. Your care will not be affected if you decline to sign.

This Notice of Privacy Practices is provided to comply with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state privacy laws. Nothing in this Notice creates contractual or legal rights beyond those required by law.