P2P Recovery Resources (P2P) is committed to protecting the privacy of the  personal and health information we collect or create as part of providing  health care services to our clients, known as “Protected Health  Information” or “PHI”. PHI typically includes your name, address, date of  birth, billing arrangements, care, and other information that relates to your  health, health care provided to you, or payment for health care provided to  you. 

This notice of Health Information Privacy Practices (the “Notice”) describes P2P  Recovery Resources’ duties with respect to the privacy of PHI, P2P Recovery  Resources’ use of and disclosure of PHI, client rights and contact information for  comments, questions, and complaints. 

We can change the terms of this notice, and the changes will apply to all information we have about you. The new notice will be available upon  request, in our office, and on our web site. 

Effective Date: July 1, 2019 

Your Rights to Privacy 

Your medical information will not be shared and/or disclosed without your  permission except as described in this notice or required by law. You may  authorize other disclosures by completing an authorization form. You may  also retract (in writing) this authorization at any time. You have the right to  ask P2P for the following: 

• Look at or obtain a copy of your medical record and other health information we have  about you. 
• To correct health information about you that you think is incorrect or incomplete. However, we may say “no” to this request and/or we may not alter the original document  but may add an amendment to your record. 
• Contact you in a preferred method including email, fax, a specific mailing address and/or  phone number. 
• Limit the use and/or disclosure of your medical information. If you pay for a service or  health care item out-of-pocket in full, you can ask us not to share that information for the  purpose of payment or our operations with your health insurer. 
• You can ask for a list (accounting) of the times we’ve shared your health information for  six years prior to the date you ask, who we shared it with, and why. We will include all  the disclosures except for those about treatment, payment, and health care operations, and  certain other disclosures (such as any you asked us to make).

1245 E COLFAX AVE. S.403 DENVER, CO 80218 303.524.9231 www.p2precovery.org 

• Receive a copy of this privacy notice. 

• If you have given someone medical power of attorney or if someone is your legal  guardian, that person can exercise your rights and make choices about your health  information. We will make sure the person has this authority and can act for you before  we take any action. 

To file a complaint if you feel we have violated your rights by contacting P2P  Recovery Resources at 303-524-9231 or any of the following: 

Department of Health and Human Services / U.S. Department of Health and Human  Services 

Office of Civil Rights / Office for Civil Rights 

1961 Stout Street, Rm 1185 FOB / 200 Independence Avenue, S.W. Denver, CO 80203 / Washington, D.C. 20201 

303-844-2024 / 877-696-6775 

or visiting www.hhs.gov/ocr/privacy/hipaa/complaints/ 

We will not retaliate against you for filing a complaint. 

Our Responsibilities 

• •We are required by law to maintain the privacy and security of your protected health  information. 
• We will let you know promptly if a breach occurs that may have compromised the  privacy or security of your information. 
• We must follow the duties and privacy practices described in this notice and give you a  copy of it. 
• We will not use or share your information other than as described here unless you tell us  we can in writing. If you tell us we can, you may change your mind at any time. Let us  know in writing if you change your mind. 

Our Confidentiality Practices and Uses of PHI 

We work from a team approach at P2P Recovery Resources. Therefore, there may  be times when it is necessary for us to consult with other professional staff either  individually or at our clinical team meetings in an effort to provide you with the  highest consideration and quality of services. 

For Your Treatment: We may use or disclose your PHI to physicians,  psychologists, nurses and other authorized healthcare professionals who 

1245 E COLFAX AVE. S.403 DENVER, CO 80218 303.524.9231 www.p2precovery.org 

need your PHI in order to conduct an examination,  

prescribe medication or otherwise provide health care services to you. We  can use your health information and share it with other professionals who  are treating you. 

To Obtain Payment: We may use or disclose your PHI to insurance  companies, government agencies or health plans to assist us in getting  paid for our services. For example, we may release information such as  dates of treatment to an insurance company in order to obtain payment. 

For Our Health Care Operations: We may use or disclose your PHI in the course of  activities necessary to support our health care operations such as performing quality  checks on your employee services. We may also disclose PHI to other persons not  in P2P Recovery Resources’ workforce or to companies who help us perform our  health services (referred to as “Business Associates”) we require these business  associates to appropriately protect the privacy of your information. 

Disclosures of Health-Related Benefits or Services: Sometimes we may want to  contact you regarding service reminders, health related products or services that  may be of interest to you, such as health care providers or settings of care or to tell  you about other health related products or services offered at P2P Recovery  Resources. You have the right not to accept such information. 

Fund Raising, Marketing, Sales: P2P may contact you to raise funds for our agency.  Any other marketing or sales uses require your written permission. If you give your  authorization to P2P, you may revoke your authorization any time (opt out), unless  we have already relied on your authorization to use or disclose information. If you  would ever like to revoke your authorization, please notify our CEO. 

To Personal Representatives: We may disclose PHI to a person designated  by you to act on your behalf and make decisions about your care in  accordance with state law. We will act according to your written  instructions in your chart and our ability to verify the identity of anyone  claiming to be your personal representative. 

To Family and Friends: We may disclose PHI to persons that you indicate are  involved in your care or the payment of care. These disclosures may occur  when you are not present, as long as you agree and do not express an  objection. These disclosures may also occur if you are unavailable,  incapacitated, or facing an emergency medical situation and we determine  that a limited disclosure may be in your best interest. We may also  disclose limited PHI to public or private entity that is authorized to assist in  disaster relief efforts in order for that entity to locate a family member or 

1245 E COLFAX AVE. S.403 DENVER, CO 80218 303.524.9231 www.p2precovery.org 

other person that may be involved in caring for you. You  have the right to limit or stop these disclosures. 

Disclosures Not Requiring Your Permission 

As Permitted or Required by The Law: In some cases, we are required by law  to disclose PHI. Such as disclosers may be required by statute, regulation  court order, government agency, we reasonably believe an individual to be  a victim of abuse, neglect, or domestic violence: for judicial and  administrative proceedings and enforcement purposes. 

For Public Health Activities: We may disclose your PHI for public health  purposes such as reporting communicable disease results to public health  departments as required by law or when required for law enforcement  purposes. 

For Health Oversight Activities: We may disclose your PHI in connection with  governmental oversight, such as for licensure, auditing and for  administration of government benefits. As well as government agencies  responsible for the Medicaid program, the U.S. Dept of Health and Human  Services, and the Office of Civil Rights. 

To Avert Serious Threat to Health and Safety: We may disclose PHI if we  believe in good faith that doing so will prevent or lessen a serious or  imminent threat to the health and safety of a person or the public. 

Research Purposes: In certain circumstances, and under supervision of a  privacy board, we may disclose medical information to assist  medical/psychiatric research. 

Worker’s Compensation: To disclose medical information to workers’  compensation programs that provide benefits for work-related injuries or  illness without regard to fault. 

Incidental Uses and Disclosures: Incidental uses and disclosures of PHI are those  that cannot be reasonably prevented, are limited in nature and that occur as a by product of a permitted use or disclosure. Such incidental used, and disclosures are  permitted as long as P2P Recovery Resources use reasonable safeguards and use  or disclose only the minimum amount of PHI necessary.