Effective Date: March 20, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

WHO THIS NOTICE APPLIES TO

This Notice of Privacy Practices (“Notice”) applies to all Protected Health Information (“PHI”) created, received, maintained, or transmitted by Restorative Spine and Joint (the “Practice,” “we,” “us,” or “our”).

For purposes of this Notice, “Practice” includes:

  • The physician-owned professional medical corporation and its licensed healthcare providers
  • Workforce members, including employees, contractors, and clinical personnel
  • Affiliated healthcare professionals involved in your care

The Practice may utilize administrative, management, and support services provided by a management services organization (“MSO”). Any such MSO and its personnel act as Business Associates and are contractually required to safeguard your PHI in accordance with applicable law.

OUR LEGAL DUTIES

We are required by law to:

  • Maintain the privacy and security of your Protected Health Information
  • Provide you with this Notice of our legal duties and privacy practices
  • Follow the terms of this Notice currently in effect
  • Notify you following a breach of unsecured PHI, as required by law

We comply with applicable federal and California laws, including the Health Insurance Portability and Accountability Act (HIPAA) and the California Confidentiality of Medical Information Act (CMIA). Where these laws differ, we follow the law that provides greater privacy protection.

HOW WE MAY USE AND DISCLOSE YOUR HEALTH INFORMATION

We may use and disclose your PHI for the following purposes:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes communication with physicians, nurses, technicians, or other healthcare providers involved in your care.

Payment

We may use and disclose your PHI to bill and collect payment for healthcare services provided to you. This may include disclosures to insurance companies, health plans, or other third parties responsible for payment.

Healthcare Operations

We may use and disclose your PHI for healthcare operations, including:

  • Quality assessment and improvement activities
  • Licensing and accreditation
  • Training and education
  • Compliance and auditing
  • Business management and planning

Individuals Involved in Your Care

We may share relevant health information with family members, close friends, or others involved in your care or payment for your care, unless you object or we determine such disclosure is not in your best interest.

Disaster Relief

We may disclose your health information to disaster relief organizations to assist in locating or notifying family members or others involved in your care.

USES AND DISCLOSURES WITHOUT YOUR AUTHORIZATION

We may use or disclose your PHI without your written authorization when permitted or required by law, including:

  • Public Health Activities – reporting diseases, injuries, or adverse events
  • Health Oversight Activities – audits, investigations, inspections, and licensure
  • Legal Proceedings and Law Enforcement – as required by law or court order
  • Workers’ Compensation – as authorized by applicable laws
  • Serious Threat to Health or Safety – to prevent or lessen a threat

USES AND DISCLOSURES REQUIRING YOUR AUTHORIZATION

We will obtain your written authorization before using or disclosing your PHI for purposes not described in this Notice, including:

  • Most uses and disclosures of psychotherapy notes
  • Marketing where authorization is required by law
  • Sale of PHI

We do not use or disclose your information for fundraising purposes.

You may revoke your authorization at any time in writing, except where we have already relied on it.

CALIFORNIA PRIVACY RIGHTS (CMIA)

California law provides additional privacy protections for medical information under the Confidentiality of Medical Information Act (CMIA).

Under CMIA:

  • Medical information may not be disclosed without patient authorization except as specifically permitted by law
  • Certain disclosures permitted under HIPAA may require separate authorization under California law
  • Patients may have the right to pursue legal remedies, including statutory damages, for unauthorized access, use, or disclosure

We will comply with CMIA and apply the more protective standard when California and federal laws differ.

SPECIAL PROTECTIONS FOR SUBSTANCE USE DISORDER RECORDS (42 C.F.R. PART 2)

Certain health information related to substance use disorder (“SUD”) diagnosis, treatment, or referral may be subject to additional federal confidentiality protections under 42 C.F.R. Part 2.

Where applicable, records that identify an individual as having sought or received SUD treatment are protected by stricter privacy standards than those that apply to other PHI under HIPAA and California law.

Use and Disclosure with Consent

To the extent permitted by law, SUD information may be used and disclosed for treatment, payment, and healthcare operations purposes if the patient has provided appropriate written consent consistent with 42 C.F.R. Part 2. Patients may provide a single consent for future uses and disclosures for treatment, payment, and healthcare operations, as permitted by law.

Limitations and Redisclosure

SUD records may not be used or disclosed without patient consent except as expressly permitted by law. Recipients of such information may be prohibited from redisclosing it without further authorization and may be subject to additional legal restrictions. Where permitted by law, if such information is disclosed to a recipient subject to HIPAA, that recipient may be allowed to use or redisclose the information in accordance with HIPAA regulations.

Legal Proceedings

SUD records are subject to special protections and generally may not be disclosed or used in legal proceedings without patient consent or a valid court order, except as otherwise permitted by law.

Patient Rights

Patients have specific rights regarding SUD information, including the right to:

  • Provide or withhold consent for certain disclosures
  • Revoke consent, as permitted by law
  • Request an accounting of disclosures
  • Request restrictions on certain uses and disclosures

Breach Notification

We will provide notification of breaches involving SUD information in accordance with applicable federal and state law.

These protections apply only to information governed by 42 C.F.R. Part 2.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You have the following rights:

Right to Access

You may inspect and obtain a copy of your medical and billing records, subject to applicable law.

Right to Amend

You may request that we correct or amend your PHI if you believe it is incorrect or incomplete.

Right to Request Restrictions

You may request restrictions on certain uses and disclosures of your PHI. We are not required to agree to all requests except where required by law.

Right to Confidential Communications

You may request that we contact you in a specific way (for example, at a different phone number or address).

Right to an Accounting of Disclosures

You may request a list of certain disclosures of your PHI made by us.

Right to a Paper Copy

You may obtain a paper copy of this Notice at any time.

Right to Breach Notification

You will be notified following a breach of unsecured PHI as required by law.

Right to a Personal Representative

If you have given someone medical power of attorney or if someone is your legal guardian, that person may exercise your rights and make choices about your health information, consistent with applicable law.

Right to File a Complaint

You have the right to file a complaint if you believe your privacy rights have been violated.

You may file a complaint with:

Restorative Spine and Joint
Attn: Privacy Officer
3596 Skyway Dr. Suite B, Santa Maria, CA 93455
805-614-7820
Info@restorativespineandjoint.com

You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights.

We will not retaliate against you for filing a complaint.

CHANGES TO THIS NOTICE

We reserve the right to change this Notice at any time. Any changes will apply to all PHI we maintain. The revised Notice will be made available:

  • On our website
  • Upon request at our office

CONTACT INFORMATION

If you have questions about this Notice or your privacy rights, please contact:

Privacy Officer
Restorative Spine and Joint
Attn: Privacy Officer
3596 Skyway Dr. Suite B, Santa Maria, CA 93455
805-614-7820
Info@restorativespineandjoint.com