THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Telemedora
1250 Borregas Avenue, Suite 62,
Sunnyvale. CA 94089
UPDATED FOR FEBRUARY 2026 COMPLIANCE
This Notice has been updated to comply with the 42 CFR Part 2 Final Rule alignment with HIPAA (compliance date: February 16, 2026), including new protections for Substance Use Disorder (SUD) treatment records, redisclosure notices, and updated patient rights.
I. OUR PLEDGE REGARDING YOUR HEALTH INFORMATION
We understand the importance of keeping your health information private. We are required by law to maintain the privacy and security of your protected health information (PHI). We are also required to provide you with this Notice of our legal duties and privacy practices concerning your PHI, and to follow the terms of the Notice currently in effect.
We will notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
II. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
We may use and disclose your PHI for the following purposes without your written authorization, subject to certain limitations described below:
A. Treatment
We may use your PHI to provide you with medical treatment or services. We may also disclose your PHI to other healthcare providers involved in your treatment, such as doctors, nurses, technicians, medical students, pharmacists, or other healthcare professionals.
B. Payment
We may use and disclose your PHI so that we, or others, can bill for the treatment and services you receive and collect payment from you, your insurance company, or a third-party payer. This may include contacting your health insurer to verify coverage and submitting claims for payment.
C. Healthcare Operations
We may use and disclose your PHI for our healthcare operations, including quality assessment, employee review activities, training programs, accreditation, certification, licensing, credentialing, auditing, compliance programs, and business planning and development.
NEW — SUBSTANCE USE DISORDER (SUD) RECORD RESTRICTIONS (42 CFR Part 2)
If you receive substance use disorder treatment from a Part 2 program, your SUD treatment records are subject to additional protections. Uses and disclosures of your SUD records for treatment, payment, and healthcare operations generally require your prior written consent, even where HIPAA would otherwise permit such uses and disclosures without consent. Please see Section VII below for a detailed description of these additional protections.
D. Other Permitted Uses and Disclosures Without Authorization
We may also use or disclose your PHI without your authorization for the following purposes, as permitted or required by law:
As required by law, including for public health activities, reporting of communicable diseases, FDA-regulated activities, and workplace safety.
To report victims of abuse, neglect, or domestic violence to government authorities.
For health oversight activities, such as audits, inspections, investigations, and licensure.
In response to a court order, subpoena, or other lawful process.
For law enforcement purposes, under limited circumstances.
To coroners, medical examiners, and funeral directors.
For organ, eye, or tissue donation purposes.
For research purposes, subject to certain protections.
To avert a serious threat to your health or safety, or that of others.
For specialized government functions, such as military, national security, or intelligence activities.
For workers’ compensation programs as authorized by law.
To the Secretary of the U.S. Department of Health and Human Services (HHS) for enforcement purposes.
E. Fundraising Communications
We may use certain PHI to contact you for fundraising efforts for the benefit of our organization. You have the right to opt out of receiving fundraising communications at any time.
NEW — FUNDRAISING & SUD RECORDS
If we create or maintain records subject to 42 CFR Part 2, we will provide you with a clear and conspicuous opportunity to opt out of receiving fundraising communications before any SUD records are used or disclosed for fundraising purposes.
F. Uses and Disclosures Requiring Your Written Authorization
For uses and disclosures not described in this Notice, we will request your written authorization before using or disclosing your PHI. You may revoke your authorization in writing at any time, except to the extent that we have already taken action in reliance on the authorization. Specific categories of PHI requiring written authorization include, but are not limited to: psychotherapy notes, marketing uses, and sale of PHI.
II. HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION
NEW REQUIREMENT (Effective February 16, 2026):
NEW REQUIREMENT (Effective February 16, 2026):
Please be aware that information we disclose pursuant to the HIPAA Privacy Rule may be subject to redisclosure by the recipient and may no longer be protected by the HIPAA Privacy Rule or other federal or state privacy protections.
However, certain categories of information—including Substance Use Disorder (SUD) records protected under 42 CFR Part 2—are subject to special redisclosure restrictions, as described in Section VII of this Notice.
IV. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
You have the following rights regarding the health information we maintain about you:
A. Right to Inspect and Copy
You have the right to inspect and obtain a copy of your PHI contained in a designated record set. We may charge a reasonable, cost-based fee. We must act on your request no later than 30 days after receiving it (with one possible 30-day extension).
B. Right to Amend
You have the right to request an amendment of your PHI for as long as we maintain the information. We may deny the request in certain circumstances and will provide a written explanation.
C. Right to an Accounting of Disclosures
You have the right to request an accounting of certain disclosures of your PHI made by us during the six years prior to your request (or such shorter period as specified in your request).
D. Right to Request Restrictions
You have the right to request restrictions on certain uses and disclosures of your PHI. We are not required to agree to your request, except that we must agree to restrict disclosures to a health plan for payment or healthcare operations purposes when you have paid in full out of pocket.
E. Right to Request Confidential Communications
You have the right to request that we communicate with you about health matters in a certain way or at a certain location. For example, you may ask that we only contact you at work or by mail.
F. Right to a Paper Copy of This Notice
You have the right to a paper copy of this Notice at any time, even if you have agreed to receive this Notice electronically. You may request a copy by contacting our Privacy Officer at the contact information listed at the end of this Notice.
V. OUR DUTIES
We are required by law to maintain the privacy and security of your PHI, to provide you with notice of our legal duties and privacy practices with respect to your PHI, to abide by the terms of the Notice currently in effect, and to notify you if we are unable to agree to a requested restriction on how we use or disclose your PHI.
We reserve the right to change the terms of this Notice and to make new notice provisions effective for all PHI we maintain. If we make a material change to this Notice, we will make the revised Notice available upon request and will post it in our facility and on our website, if applicable.
VI. COMPLAINTS
If you believe your privacy rights have been violated, you may file a complaint with us at the contact information below or with the Secretary of the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.
U.S. Department of Health and Human Services Office for Civil Rights Website:
https://www.hhs.gov/hipaa/filing-a-complaint/index.html
VII. ADDITIONAL PROTECTIONS FOR SUBSTANCE USE DISORDER (SUD) TREATMENT RECORDS
NEW SECTION — REQUIRED BY 42 CFR PART 2 ALIGNMENT (February 16, 2026)
The following section provides notice of additional protections that apply to substance use disorder treatment records maintained or created by programs subject to 42 CFR Part 2.
Federal law (42 CFR Part 2) provides additional privacy protections for information relating to substance use disorder (SUD) treatment received from a program subject to Part 2 (a "Part 2 Program"). These protections apply in addition to the protections afforded by HIPAA, and in some cases are more restrictive.
A. Consent Requirements for SUD Records
Unlike other health information protected by HIPAA, the use or disclosure of SUD treatment records created or maintained by a Part 2 Program for treatment, payment, and healthcare operations generally requires your prior written consent. This means we cannot use or share your SUD treatment records for these purposes unless you have signed a written consent form authorizing us to do so, even though HIPAA would otherwise permit such uses or disclosures without consent.
B. Restrictions on Use in Legal Proceedings
Substance use disorder treatment records received from programs subject to 42 CFR Part 2, or testimony relaying the content of such records, shall not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you unless based on your written consent, or a court order after notice and an opportunity to be heard is provided to you or the holder of the record, as provided in 42 CFR Part 2.
A court order authorizing use or disclosure must be accompanied by a subpoena or other legal requirement compelling disclosure before the requested record is used or disclosed.
C. Permitted Uses and Disclosures of SUD Records
With your written consent, your SUD records may be used or disclosed for the following purposes:
Treatment, payment, and healthcare operations (with written consent).
To the Secretary of HHS for enforcement purposes.
To report a medical emergency.
For audits and evaluations as permitted by Part 2.
Pursuant to a valid court order meeting Part 2 requirements.
To report suspected child abuse or neglect as mandated by state law.
For public health activities as authorized under Part 2.
D. Redisclosure Restrictions for SUD Records
SUD treatment records disclosed by a Part 2 Program are subject to restrictions on further disclosure (redisclosure). Any recipient of your SUD records is bound by the same restrictions on use and disclosure as the original Part 2 Program, and must comply with the Part 2 regulations regarding redisclosure. This means that even after your SUD records are shared with another provider or entity, those records continue to receive heightened protection and cannot be freely redisclosed.
E. Breach Notification for SUD Records
The HIPAA Breach Notification Rule requirements now apply to SUD records protected under Part 2. If we experience a breach of your SUD treatment records, we are required to notify you without unreasonable delay, and no later than 60 days from the date of discovery of the breach, consistent with the HIPAA Breach Notification Rule.
F. Your Rights Regarding SUD Records
In addition to the rights described in Section IV above, you have the following rights with respect to your SUD records protected under 42 CFR Part 2:
The right to receive a copy of the Part 2 Patient Notice describing the program’s policies.
The right to revoke your written consent for disclosure of SUD records at any time.
The right to request restrictions on uses and disclosures of your SUD records.
VIII. MORE STRINGENT STATE AND FEDERAL LAWS
Where state or other federal laws provide more stringent privacy protections than HIPAA or 42 CFR Part 2, we will comply with the more protective requirements. If your PHI is subject to additional restrictions under applicable state law, those additional restrictions will be described in supplemental notices or addenda to this Notice. Examples of categories of information that may be subject to more stringent protections include mental health records, HIV/AIDS-related information, genetic information, and minor consent records.
IX. CONTACT INFORMATION
If you have any questions about this Notice, wish to exercise any of your rights, or want to file a complaint, please contact:
Privacy Officer: Subaila Zia
Address: 1250 Borregas Avenue, Suite 62, Sunnyvale. CA 94089
Telephone number:
650-687-7368
Email Address:
info@telemedora.com
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, by visiting www.hhs.gov/ocr/privacy/hipaa/complaints, calling 1-877-696-6775, or sending a letter to: 200 Independence Avenue, S.W., Washington, D.C. 20201.
This Notice is effective as of February 16, 2026, and replaces any prior Notice of Privacy Practices
