THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date: January 1, 2026

OUR LEGAL DUTY TO PROTECT YOUR HEALTH INFORMATION

Cornerstone HealthMD Corp and all members of its Affiliated Covered Entity (collectively, “Cornerstone HealthMD,” “we,” or “our”) are required by law to maintain the privacy of your health information in accordance with federal and state law. In particular, we protect the privacy and security of substance use disorder patient records in accordance with 42 U.S.C. § 290dd–2 and 42 C.F.R. Part 2, in addition to the Health Insurance Portability and Accountability Act (“HIPAA”) and applicable state privacy laws.

This Notice of Privacy Practices (“Notice”) describes our legal duties and privacy practices regarding your protected health information. We are required by law to provide you with this Notice and to notify you following a breach of unsecured health information.

We will follow the terms of this Notice currently in effect. We reserve the right to change this Notice as permitted by law and to make the revised Notice effective for all health information we maintain, including information created or received before the change. If we make material changes to this Notice, we will promptly update it and post the revised version on our website at https://cornerstonehealthmd.com. Each version of this Notice will list its effective date.

You have the right to file a complaint if you believe your privacy rights have been violated. You may file a complaint by contacting Cornerstone HealthMD’s Privacy Officer by telephone at 844-943-2514 or by email at support@cornerstonehealthmd.com. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services or, where applicable, the Substance Abuse and Mental Health Services Administration (SAMHSA). You will not be penalized or retaliated against for filing a complaint.

USES AND DISCLOSURES OF YOUR HEALTH INFORMATION

We will obtain your written authorization before using or disclosing your health information unless the use or disclosure is permitted or required by law. The categories below describe the ways we may use or disclose your health information without your written authorization, as allowed under HIPAA and 42 C.F.R. Part 2. When state law provides greater privacy protection than federal law, we comply with the more restrictive law.

Within Our Organization. Members of the Cornerstone HealthMD workforce may use and share your health information as necessary to provide diagnosis, treatment, referrals for treatment, care coordination, and healthcare operations.

Emergency Treatment. In the event of a bona fide medical emergency where your prior authorization cannot be obtained, we may disclose limited information to medical personnel as necessary to treat you. Authorization is required for non-emergency disclosures.

Business Associates and Qualified Service Organizations. We may disclose your health information to third parties that perform services on our behalf, such as billing, information technology, telehealth platforms, or administrative support services. These entities are required by law to safeguard your information and use it only for authorized purposes.

Audits and Oversight Activities. We may disclose health information to government agencies or other authorized entities for audits, inspections, investigations, or compliance reviews, as permitted by law.

Legal Proceedings. We may disclose your health information in response to valid court orders or legal processes that meet applicable legal requirements.

Crimes on Our Premises or Against Our Personnel. We may report information related to a crime committed or threatened on our premises or against our staff to law enforcement authorities, as permitted by law. Such disclosures may include limited identifying and incident-related information.

Reporting Abuse or Neglect. We may report suspected child abuse or neglect to appropriate state or local authorities as required by law.

Deceased Individuals. We may disclose health information related to a deceased individual as required for vital statistics, cause of death determinations, or other lawful purposes.

Research. Under certain circumstances, we may disclose health information for approved research purposes. Identifiable information will not be published or shared without your written authorization.

Public Health and FDA Reporting. We may disclose health information to public health authorities or the U.S. Food and Drug Administration when required to address product safety issues or potential health risks.

OTHER USES AND DISCLOSURES

Any use or disclosure of your health information not described above requires your written authorization. This includes, but is not limited to:

  • Disclosure of your presence in treatment
  • Use of your information for marketing purposes
  • Sale of your health information

If you authorize a use or disclosure and later change your mind, you may revoke your authorization in writing. Revocation will not affect any use or disclosure that occurred before we received your revocation.

To revoke an authorization, please contact Cornerstone HealthMD’s Privacy Officer using the contact information listed below.

YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION

You have the right to inspect and receive a copy of the health information we maintain about you. Requests must be made in writing, and reasonable fees may apply as permitted by law. You may request that records be provided in electronic form where available, or that they be sent to a person or entity you designate.

You have the right to request confidential communications of your health information in a specific manner or at a specific location. We will accommodate reasonable requests and will not ask for the reason for your request.

You have the right to request that we amend health information you believe is incorrect or incomplete. Requests must be submitted in writing and include a reason. We may deny requests under certain circumstances, but you will be informed of the reason and your right to submit a statement of disagreement.

You have the right to request an accounting of certain disclosures of your health information made during the previous six years. One accounting per year is provided at no charge.

You have the right to request restrictions on certain uses and disclosures of your health information. While we are not required to agree to all requested restrictions, we will comply when required by law.

You have the right to receive a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

CONTACT INFORMATION

If you have questions or concerns about this Notice or your privacy rights, please contact:

Privacy Officer
Cornerstone HealthMD Corp
673 River Oaks Ln
Evans, GA 30809
📞 844-943-2514
📧 support@cornerstonehealthmd.com