NOTICE OF PRIVACY PRACTICES
Effective Date: May 31, 2026
Karen Mattera - Music Therapy & Wellness, LLC
karen@matteramusictherapy.com
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
1. My Commitment to Your Privacy
I am committed to maintaining the privacy of your protected health information (PHI) as part of providing professional music therapy services. This practice uses Practice in Tune as a HIPAA-compliant Electronic Health Record (EHR) system. All data entered into this system is protected by administrative, physical, and technical safeguards, including encryption in transit and at rest.
2. How I May Use and Disclose Your PHI
I may use your health information for Treatment, Payment, and Healthcare Operations (TPO) without your specific written authorization:
- Treatment: Sharing information with other clinicians involved in your care to coordinate music therapy services.
- Payment: Billing your insurance provider or processing credit card payments for sessions.
- Healthcare Operations: Standard business activities like scheduling, quality audits, or platform maintenance through our Business Associate, Practice in Tune.
3. Uses and Disclosures Required by Law
In certain circumstances, I may be required by Connecticut and Federal law to disclose your PHI without your consent:
- Mandatory Reporting: To report suspected child or elder abuse or neglect.
- Public Safety: To prevent a serious and imminent threat to your health or safety or that of another person.
- Legal Proceedings: In response to a court order or subpoena.
4. Special Protections for Substance Use Disorder (SUD) Records
Records created or received by this practice regarding substance use disorder are protected by 42 CFR Part 2 and require stricter protections:
- Legal Protections: SUD records and related testimony generally cannot be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without your specific written consent or a qualifying court order.
- Redisclosure Warning: While information shared under HIPAA may potentially be redisclosed by a recipient and lose its protection, SUD records disclosed to a covered entity or business associate generally cannot be further disclosed without your written consent except as permitted by federal law.
5. Other Uses and Disclosures Requiring Authorization
I will not sell your information or use it for marketing purposes without authorization.
- Psychotherapy Notes: Under Connecticut law, "process notes" or psychotherapy notes are maintained separately from the clinical record and require a separate, specific authorization for release.
- Fundraising: If I ever intend to use your information for fundraising, I must first provide you with a clear and conspicuous opportunity to opt out of receiving such communications.
6. Your Rights Under HIPAA and Connecticut Law
- Right to Access: You may request to inspect and receive an electronic copy of your records.
- Right to Amend: If you believe your records are inaccurate, you may request a correction in writing.
- Right to Restrict Disclosures: You can request that we do not share certain information for treatment or payment.
- Right to Confidential Communications: You may ask that I contact you in a specific way (e.g., cell phone vs. home phone).
- Right to Breach Notification: You will be notified promptly if a breach occurs that compromises the privacy or security of your unsecured PHI.
- Right to a Paper Copy: You may request a copy of this notice at any time.
7. My Responsibilities & Complaints
- I am required by law to maintain the privacy of your PHI and abide by the terms of this notice. I reserve the right to change this notice; updated versions will be posted on my website and available upon request.
- If you believe your privacy rights have been violated, you may file a complaint with me or with the Secretary of the U.S. Department of Health and Human Services. I will not retaliate against you for filing a complaint.