Book an Initial Relationship Session →

HIPAA Notice of Privacy Practices

Effective Date: August 3, 2026

This notice explains how your personal information, including Protected Health Information (PHI), may be collected, used, and disclosed by David Lechnyr, LCSW to provide services while ensuring confidentiality. All therapy services are provided in compliance with the Health Insurance Portability and Accountability Act (HIPAA).


Your Rights

You have certain rights regarding your personal information, including Protected Health Information (PHI). These rights include:

Access Your Records

You have the right to request an electronic or paper copy of your records. We will provide access within 30 days of your request. A reasonable, cost-based fee may apply. If you request a specific format, we will accommodate it if readily producible.

Request Corrections

You may request an amendment to information in your record that you believe is incorrect or incomplete. We will respond within 60 days. If your request is denied, we will provide a written explanation. You may submit a written statement of disagreement, which will be included in your record.

Request Confidential Communications

You may request that we contact you in a specific way or at a specific location, such as by phone, email, or mail. Reasonable requests will be honored.

Request Restrictions on Use or Disclosure

You may request limitations on how your information is used or disclosed for treatment, payment, or health care operations. We are not required to agree to all requests, but will comply when feasible. If you pay for services in full out of pocket, you may request that information related to those services not be shared with your health plan, and we will honor that request as required by law.

Receive an Accounting of Disclosures

You may request a list of certain disclosures of your PHI made in the six years prior to your request, excluding disclosures made for treatment, payment, or health care operations.

Right to Be Notified of a Breach

You have the right to be notified following a breach of your unsecured PHI, as required by law.

Obtain a Copy of This Notice

You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

Choose Someone to Act for You

If you have a legal guardian or someone with medical power of attorney, that individual may exercise your rights and make decisions about your information.

File a Complaint

If you believe your privacy rights have been violated, you may file a complaint with U.S. Department of Health and Human Services – Office for Civil Rights at 200 Independence Ave SW, Washington, D.C. 20201, or by phone at 877-696-6775, or online at https://www.hhs.gov/hipaa/filing-a-complaint/what-to-expect/. We will not retaliate against you for filing a complaint.

Your Choices

In certain situations, you have the right to decide how your information is shared. You may tell us your preferences regarding:

  • Sharing information with family members or others involved in your care
  • Disclosures for disaster relief purposes

If you are unable to express your preferences, we may share information if we determine it is in your best interest. We may also disclose information when necessary to reduce a serious and imminent threat to your health or safety or the safety of others.

Uses and Disclosures of Your Information

We may use or disclose your PHI in the following ways:

Treatment

We use your information to provide therapy services and to coordinate care as clinically appropriate.

Payment

We may use and disclose your information to bill for services and to collect payment from you, an insurance provider, or another responsible party.

Health Care Operations

We may use your information to operate our practice, improve services, manage administrative functions, and communicate with you.

Appointment Reminders

We may contact you with appointment reminders or scheduling communications. You may opt out of these communications at any time.

Telehealth Delivery

Services are provided via secure, HIPAA-compliant telehealth platforms. Your information may be transmitted electronically during sessions. We take reasonable steps to verify your identity and location at the start of each session.

Legal and Public Health Disclosures

We may disclose your information as required or permitted by law, including for:

  • Reporting suspected abuse, neglect, or exploitation
  • Public health and safety activities
  • Health oversight activities, including audits, investigations, inspections, or licensing actions by regulatory or licensing authorities
  • Workers’ compensation claims
  • Legal proceedings, such as court orders or subpoenas
  • Law enforcement purposes when legally required
  • Coroners or medical examiners

All such disclosures are limited to the minimum necessary information required.

Specially Protected Information

Certain information, including psychotherapy notes, is afforded additional protection under federal and state law. Such information will not be disclosed without your specific written authorization, except as permitted or required by law.

Our Responsibilities

We are legally required to:

  • Maintain the privacy and security of your PHI
  • Provide you with this Notice and follow its terms
  • Notify you promptly if a breach occurs that may compromise your information
  • Obtain your written authorization for uses or disclosures not described in this Notice

We do not sell your protected health information to third parties. We do not use your health information for marketing purposes without your explicit written authorization. This practice does not participate in data aggregation, commercial data sharing, or advertising programs that involve your personal or health information in any form.

Data Security and Retention

Secure Storage

Records are maintained in encrypted, password-protected systems.

Limited Access

Access is restricted to David Lechnyr, LCSW, and any business associates operating under a Business Associate Agreement.

Retention

Records are retained for at least six years in accordance with applicable state law.

Changes to this Notice

We reserve the right to change this Notice and to make the revised Notice effective for information we already maintain, as well as for information received in the future. The current version will be available on our website and upon request.

Questions about this Notice or your privacy rights may be directed to David Lechnyr, LCSW, at 503-941-0490. To submit a written request or complaint by mail, contact us at the above and we will provide a mailing address.