Notice of Privacy Practices

About This Notice

Resilient Mind Therapy, operated by Hannah Weithofer, Licensed Clinical Social Worker ("we," "us," or "our"), is required by law to maintain the privacy of your Protected Health Information (PHI), to provide you with this Notice of Privacy Practices, and to abide by the terms described in this Notice.

Protected Health Information (PHI) means any information we create or receive that identifies you and relates to your past, present, or future physical or mental health condition; the provision of health care to you; or the payment for that health care.

This Notice applies to all records of your care created or maintained by Resilient Mind Therapy, including records related to telehealth services provided across Nevada.

How We May Use and Disclose Your Health Information

Uses and Disclosures That Do Not Require Your Authorization

Federal and state law permit us to use and disclose your PHI without your written authorization in the following circumstances:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your mental health treatment and related services. For example, we may share relevant information with another treating provider — such as your primary care physician or psychiatrist — when coordinating your care, and only with your knowledge.

Payment

We may use and disclose your PHI to obtain payment for services we provide. This includes submitting claims to your insurance company, verifying your eligibility, or responding to insurance inquiries about services rendered.

Health Care Operations

We may use and disclose your PHI for internal operational purposes, including quality assessment, clinical supervision, training, licensing compliance, and business management.

As Required by Law

We will disclose your PHI when required to do so by applicable federal, state, or local law, including court orders, subpoenas, and administrative orders.

Mandated Reporting

As a licensed mental health professional in Nevada, we are required by law to report certain situations without your consent, including:

• Reasonable suspicion of child abuse or neglect (NRS 432B.220)
• Reasonable suspicion of elder or vulnerable adult abuse or neglect (NRS 200.5093)
• Situations where you pose a serious, imminent threat of harm to yourself or an identifiable third party, and disclosure is necessary to prevent that harm (Tarasoff duty / NRS 49.225)
• Situations where a court of competent jurisdiction orders disclosure

Serious Threats to Health or Safety

We may use or disclose your PHI if we believe in good faith that doing so is necessary to prevent or lessen a serious and imminent threat to your health or safety, or the health or safety of another person.

Public Health Activities

We may disclose your PHI to public health authorities for activities authorized by law, such as reporting certain communicable diseases or responding to a public health emergency.

Health Oversight Activities

We may disclose your PHI to health oversight agencies — such as the Nevada State Board of Examiners for Social Workers or the U.S. Department of Health and Human Services — for lawful oversight activities, including audits and investigations.

Judicial and Administrative Proceedings

We may disclose your PHI in response to a court order, subpoena, discovery request, or other lawful process, subject to applicable protections.

Law Enforcement

We may disclose your PHI to law enforcement under certain limited circumstances as required or permitted by law, such as to report certain crimes or locate a fugitive.

Workers' Compensation

We may disclose your PHI to the extent necessary to comply with workers' compensation or similar programs providing benefits for work-related injuries, as authorized by law.

Business Associates

We may share your PHI with third parties — called Business Associates — who perform services on our behalf, such as billing companies, technology platforms, and scheduling systems. We require all Business Associates to sign a Business Associate Agreement (BAA) and protect your PHI in accordance with HIPAA.

Uses and Disclosures That Require Your Written Authorization

All other uses and disclosures of your PHI not described in this Notice will be made only with your signed written authorization, including:

• Disclosures to family members, friends, or others you designate
• Use or disclosure for marketing purposes
• Sale of your PHI
• Most disclosures of psychotherapy notes
• Disclosures to employers or other third parties not otherwise permitted

You have the right to revoke a written authorization at any time by submitting a written request to us. Revocation will not apply to actions we have already taken in reliance on the authorization.

Nevada-Specific Provisions

Nevada law (NRS Chapter 629; NRS 433.332) may provide additional protections for your mental health records beyond those required by federal HIPAA regulations. Where Nevada law is more protective of your privacy than HIPAA, we will comply with Nevada law. Nevada law generally prohibits disclosure of mental health records without your written consent except as outlined in this Notice.

Your Rights Regarding Your Health Information

• Right to Inspect and Receive a Copy of Your Records
  You have the right to inspect and receive a copy of your PHI that we maintain in our designated record set, including your treatment records and billing records. We may charge a reasonable cost-based fee for copies. We may deny access in limited circumstances — for example, if we determine that access is likely to endanger your life or the life of another person. If we deny access, you may request a review of the denial.
• Right to Amend Your Records
  If you believe that PHI we maintain about you is incorrect or incomplete, you may request that we amend it. We may deny the request if we did not create the information, if the information is not part of our records, if you do not have the right to inspect the information, or if the information is accurate and complete.
• Right to an Accounting of Disclosures
  You have the right to request a list of certain disclosures we have made of your PHI during the six years prior to your request. This accounting does not include disclosures for treatment, payment, health care operations, or disclosures you have authorized.
• Right to Request Restrictions
  You have the right to request restrictions on how we use or disclose your PHI for treatment, payment, or health care operations purposes, or to restrict disclosures to individuals involved in your care. We are not generally required to agree to a requested restriction, but we must comply if you request that we not disclose your PHI to a health plan for services you have paid for entirely out of pocket.
• Right to Request Confidential Communications
  You have the right to request that we communicate with you about your health information in a specific way or at a specific location (for example, by phone only or only at your work address). We will accommodate reasonable requests. You do not need to provide a reason.
• Right to Receive a Paper Copy of This Notice
  Even if you have agreed to receive this Notice electronically, you have the right to receive a paper copy at any time by contacting us at the information below.
• Right to Be Notified of a Breach
  If there is a breach of your unsecured PHI, we will notify you as required by the HIPAA Breach Notification Rule (45 CFR §§164.400–414) within 60 days of discovering the breach.
• Right to File a Complaint
  If you believe your privacy rights have been violated, you may file a complaint with us (see below) or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be penalized or subject to retaliation for filing a complaint.

Our Responsibilities

We are required by law to:

• Maintain the privacy and security of your PHI
• Provide you with this Notice of our privacy practices
• Notify you following a breach of your unsecured PHI
• Abide by the terms of the Notice currently in effect
• Not use or disclose your PHI in any way that is not described in this Notice without your authorization

Changes to This Notice

We reserve the right to change this Notice at any time and to make the revised Notice effective for PHI we already maintain as well as any new PHI we receive after the revision date. The current Notice will always be available on our website at resilientmind.health/privacy-policy. You may also request a paper copy of the current Notice at any time.

If we make a material change to this Notice, we will post a prominent notice on our website and, where feasible, notify existing clients directly.

How to File a Complaint

File a complaint with Resilient Mind Therapy

File a complaint with the U.S. Department of Health and Human Services

Contact Us

If you have questions about this Notice or about how your health information is handled, please contact us: