HIPAA Notice of Privacy Practices (NPP)

Effective Date: January 1, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION.

This Notice applies to all protected health information maintained by BritePath Medical in accordance with HIPAA and applicable Arizona law.

PLEASE REVIEW IT CAREFULLY.

Our Responsibilities

We are required by law to:

  • Maintain privacy of PHI
  • Provide this Notice
  • Follow this Notice
  • Notify affected individuals following a breach of unsecured protected health information when required by law.
  • We will not use or disclose your protected health information other than as described in this Notice unless you authorize us to do so in writing.

Uses and Disclosures Without Authorization

  • Treatment: We may use and disclose your health information to provide, coordinate, or manage your healthcare and related services.
  • Payment: We may use and disclose your health information to obtain payment for services provided to you.
  • Healthcare Operations: We may use and disclose your health information for activities necessary to operate our practice, improve quality of care, train staff, conduct audits, and comply with legal obligations.

Additional Permitted Disclosures

  • Public health reporting
  • Health oversight activities
  • Law enforcement
  • Court orders
  • Workers’ compensation
  • To avert a serious threat to health or safety where permitted by law
  • Organ donation
  • Military and national security activities
  • Coroners and medical examiners
  • Research disclosures may occur only when approved through applicable legal and ethical review processes and subject to privacy protections required by law.

Uses Requiring Authorization

We will obtain written authorization before:

  • Marketing using PHI
  • Sale of PHI
  • Certain disclosures not otherwise permitted

Any authorization you provide may be revoked at any time in writing, except to the extent we have already acted upon the authorization.

BritePath Medical does not currently use protected health information for fundraising activities.

Your Rights

Right to Access
Request copies of records.

Right to Amend
Request corrections.

Right to Request Restrictions
You may request restrictions on certain uses or disclosures of your health information. While we are not required to agree to every request, we will comply when required by law.

Right to Receive Confidential Communications
You have the right to request that we communicate with you in a specific manner or at a specific location (for example, only by mobile phone, email, secure portal, or mail). We will accommodate reasonable requests.

Right to Accounting
Request a list of certain disclosures.

Right to Revoke Authorization
If you provide written authorization for uses or disclosures of your health information, you may revoke that authorization at any time in writing, except to the extent we have already acted upon it.

Personal Representatives
We may disclose health information to a personal representative authorized by law to act on your behalf.

Family Members and Caregivers
Unless you object, we may share relevant health information with family members, caregivers, or others involved in your care or payment for your care.

Right to Receive a Copy of This Notice
You have the right to obtain a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

Electronic Communications

At your request or with your consent, we may communicate with you electronically, including by email, SMS text message, telehealth platforms, patient portals, or other electronic means. While we employ safeguards, electronic communications may involve inherent privacy and security risks.

Retention of Records

Medical records are maintained in accordance with applicable federal and Arizona state record retention requirements.

Complaints

You may file complaints with:
BritePath Medical Privacy Officer

or

The U.S. Department of Health and Human Services Office for Civil Rights.

U.S. Department of Health and Human Services

Office for Civil Rights

HHS Office for Civil Rights Complaint Portal

Patients may file a complaint directly with the U.S. Department of Health and Human Services Office for Civil Rights.

BritePath Medical will not retaliate against you for exercising your privacy rights or filing a complaint.

Changes to This Notice

We reserve the right to change this Notice. Updated versions will apply to all protected health information maintained by BritePath Medical and will be made available on our website and in our office.

This Notice applies to all protected health information maintained by BritePath Medical, regardless of when the information was created or received.

Contact Information

If you have questions regarding these HIPAA Notice of Privacy Practices (NPP), please contact:

BritePath Medical Privacy Officer

Surprise Location:
14827 W Bell Road, Unit 103
Surprise, AZ 85374

Anthem Location:
3624 W Anthem Way, Suite C114
Anthem, AZ 85086

Phoenix Location:
8618 N 35th Ave, Suite 3
Phoenix, AZ 85051

General Inquiries: info@britepathmedical.com
Privacy Officer: privacy@britepathmedical.com
Phone: (602) 773-5600