NOTICE OF PRIVACY PRACTICES
Effective Date: June 24, 2026
Karen Mattera - Music Therapy & Wellness, LLC
karen@matteramusictherapy.com
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
I. My Commitment to Your Privacy
As a music therapist, I understand that your health information is highly personal. I am committed to protecting your privacy and complying with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state laws. I create a record of the services you receive from me to provide you with quality care and to comply with legal requirements.
II. How I May Use and Disclose Your Protected Health Information (PHI)
Federal law permits me to use and disclose your PHI without your written authorization in specific situations:
- Treatment: I may use and disclose your health information to provide, coordinate, or manage your music therapy care. This includes coordinating care with a doctor, school, or other therapist involved in your treatment.
- Payment: I may use and disclose your health information to bill and collect payment for the music therapy services I provide to you or your insurance company or health plan.
- Healthcare Operations: I may use and disclose your information for my business operations, such as administrative planning and quality improvement.
III. Uses and Disclosures Required or Permitted by Law
I may use or disclose your PHI without your authorization when required or permitted by federal or Connecticut law in the following circumstances:
- Public Health and Safety: To prevent or lessen a serious, imminent threat to the health or safety of you, another person, or the public.
- Abuse and Neglect Reporting: To report suspected child abuse, neglect, or elder abuse to the Connecticut Department of Children and Families (DCF) or Department of Social Services (DSS) as mandated by state law.
- Law Enforcement & Judicial Proceedings: In response to a valid court order, administrative tribunal, warrant, or specific statutory mandate.
- Health Oversight Activities: To regulatory bodies (such as the Connecticut Department of Public Health or HHS) for audits, investigations, or licensure requirements.
IV. Heightened Protections and When Written Authorization is Required
Connecticut laws and federal rules place stricter limits on certain types of health data. I will obtain your explicit written authorization before releasing:
- Psychotherapy and Counseling Notes: Under Connecticut law, therapy communications are highly confidential. I will not disclose clinical notes, treatment summaries, or session recordings to any third party (including attorneys) without explicit written authorization or a highly specific court order.
- Substance Use Disorder (SUD) Records: If I receive or maintain any information originating from a specialized addiction program protected under 42 CFR Part 2, it receives heightened protection. I will not disclose information identifying you as having a substance use disorder or participating in an addiction program in civil, criminal, administrative, or legislative proceedings unless you provide specific written consent, or a specialized court order is issued.
V. Your Rights Regarding Your Health Information
You have the following rights regarding the health information I maintain about you:
- Right to Inspect and Copy: You have the right to inspect and/or receive a copy of your clinical and billing records.
- Right to Request Restrictions: You can ask me to limit how I use or disclose your health information. Please note that I am not legally required to agree to requested restrictions.
- Right to Request Confidential Communications: You can request that I communicate with you in a specific way (e.g., only via email or at a specific phone number).
- Right to Amend: If you believe information in your records is incorrect or incomplete, you have the right to request that I amend it.
- Right to an Accounting of Disclosures: You can request a list of instances where I have disclosed your PHI for reasons other than treatment, payment, or healthcare operations. This includes a right to an accounting of disclosures for any federally protected SUD records.
- Rights of Minors (Connecticut Law): In the State of Connecticut, minors aged 16 or older have the legal right to independently consent to outpatient mental health or counseling services under certain criteria. When a minor validly consents to these services independently, they control the privacy of those specific treatment records, and information from these sessions cannot be released to parents or guardians without the minor's express permission.
- Right to a Paper Copy: You have a right to request a paper copy of this notice at any time, even if you previously agreed to receive it electronically.
VI. Electronic Health Records & Sessions Health
I securely store and manage your clinical data using Sessions Health, a HIPAA-compliant Electronic Health Record (EHR) platform. Your treatment records, progress notes, and electronic portal communications are protected using advanced data encryption and strict technical access controls.
VI. My Duties
- I am required by law to maintain the privacy and security of your PHI.
- I will notify you promptly if a breach occurs that may have compromised the privacy or security of your information.
- I must follow the duties and privacy practices described in this notice.
VII. My Duties & Complaints
If you believe your privacy rights have been violated, you can file a formal complaint with me directly or with the U.S. Department of Health and Human Services (HHS). I will not retaliate against you in any way for filing a complaint.
Connecticut Department of Public Health
410 Capitol Avenue, Hartford, CT 06134
Phone: (860) 509-7400
Practice Contact Information:
Karen Mattera - Music Therapy & Wellness, LLC.
karen@matteramusictherapy.com