Your Privacy Matters: HIPAA Notice of Privacy Practices

Notice to Patients of Privacy Practices of Midwest Integrated Care

Midwest Integrated Care respects your privacy and is committed to protecting it through compliance with our privacy practices policy. This Notice describes how we collect, process, retain, and disclose personal data about you when providing our substance abuse disorder treatment services (“Services”) to you, and our practices for using, maintaining, protecting and disclosing that information. This Notice also describes your rights to the use of your health information and how you can file a complaint concerning a violation of your rights. You can discuss this Notice with Midwest Integrated Care if you have any questions. This Notice became effective on October 29, 2025.

You can provide written authorization regarding the use and disclosure of your personal data. You have the right to revoke your written authorization at any time but must do so in writing. All revocations must be in writing unless the revocation is for Substance Abuse Treatment in which case verbal revocation is acceptable.

Your substance abuse disorder records are protected under the Federal regulations governing Confidentiality and Substance Abuse Disorder Records, 42 CFR part 2, and the Health Insurance Portability Accountability Act of 1996 (“HIPPA”), 45 CFR parts 160 and 164, and cannot be disclosed without your written consent unless otherwise provided for by the regulations.

Each disclosure made with your written consent must be accompanied by the following written statement:              

“This information has been disclosed to you from records protected by federal confidentiality rules (42 CFR part 2). The federal rules prohibit you from making any further disclosure of information in this record that identifies a patient as having or having had a substance use disorder either directly, by reference to publicly available information, or through verification of such identification by another person unless further disclosure is expressly permitted by the written consent of the individual whose information is being disclosed or as otherwise permitted by 42 CFR part 2.  A general authorization for the release of medical or other information is NOT sufficient for this purpose (see § 2.31). The federal rules restrict any use of the information to investigate or prosecute with regard to a crime any patient with a substance abuse disorder, except as provided for at §§ 2.12(c)(5) and 2.65.”

Midwest Integrated Care uses your personal data to:

  • Provide you with the Services and any contents, features, information, products or services that we make available through the Services.
  • Provide you with notices.      
  • Improve our Services.
  • Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
  • Notify you when Services updates are available and about changes to our Services.
  • In any other way we may describe when you provide the information.
  • For any other purpose with your consent.

Midwest Integrated Care may disclose your personal data that we collect or you provide as described in this policy:

  • As aggregated information, that does not identify any individual, without restriction.
  • To other organizations, such as contractors or other third parties, that support Midwest Integrated Care who are bound by contractual obligations to keep personal data confidential and use it only for the purposes for which we disclose it to them.
  • To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of assets in which personal data held by Midwest Integrated Care is part of the assets transferred.
  • To fulfill the purpose for which you provide it.
  • For any other purpose disclosed by Midwest Integrated Care when you provide the information.
  • With your consent.

Midwest Integrated Care may also disclose your personal data:

  • To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
  • Provided that records, or testimony relaying the content of such records, shall not be used or disclosed in any civil, administrative, criminal, or legislative proceedings against the patient unless based on specific written consent or a court order. Records shall only be used or disclosed based on a court order after notice and an opportunity to be heard is provided to the patient or the holder of the record, where required by 42 U.S.C. 290dd-2 and part 2. A court order authorizing use or disclosure must be accompanied by a subpoena or other similar legal mandate compelling disclosure before the record is used or disclosed.
  • To enforce or apply Midwest Integrated Care’s terms of use.
  • If Midwest Integrated Care believes disclosure is necessary or appropriate to protect the rights, property, or safety of Midwest Integrated Care or others.

If you believe your privacy rights have been violated you may file a complaint at [email protected] or with the Secretary of the U.S. Department of Health and Human Services. You will not be retaliated against for filing a complaint.

Your patient privacy rights include:

  • The right to request restrictions of disclosures made with prior consent for purposes of treatment, payment, and health care operations, as provided for in § 2.26.
  • The right to request and obtain restrictions of disclosures of records under 42 CFR  part 2 to your health plan for those services for which you have paid in full, in the same manner as 45 CFR 164.522 applies to disclosures of health information.
  • You may provide a single consent for all future uses or disclosures for treatment, payment, and health care operations purposes.
  • You may revoke written consent as provided for in §§ 2.31 and 2.35.
  • Your right to an accounting of disclosures of electronic records under part 2 for the past three years, as provided in § 2.25, and a right to an accounting of disclosures that meets the requirements of 45 CFR 164.528(a)(2) and (b) through (d) for all other disclosures made with consent.
  • Your right to a list of disclosures by an intermediary for the past three years as provided in § 2.24.
  • Your right to obtain a paper or electronic copy of this Notice upon request.
  • Your right to discuss this Notice with the contact person designated above.
  • Your right to elect not to receive fundraising communications.

Midwest Integrated Care’s duties include:

  • As a part 2 program Midwest Integrated Care is required by law to maintain the privacy of records, provide patients with notice of its legal duties and privacy practices with respect to records, and notify affected patients following a breach of unsecured records.
  • As a part 2 program Midwest Integrated Care is required to abide by the terms of the Notice currently in effect.
  • Midwest Integrated Care will only make uses and disclosures not described in this Notice only with the patient’s written consent.  
  • As a part 2 program, in order for Midwest Integrated Care to apply a change in a privacy practice that is described in the Notice to records that the part 2 program created or received prior to issuing a revised notice, Midwest Integrated Care reserves the right to change the terms of its Notice and make the new notice provisions effective for records it maintains.  Midwest Integrated Care will provide patients with a revised notice electronically and/or by paper.