Notice of Privacy Practices

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

Effective Date:12-27-2025

Cornerstone HealthMD and its affiliated providers and entities (collectively, “Cornerstone HealthMD,” “we,” or “our”) are required by law to maintain the privacy and security of your health information in accordance with federal and applicable state law.

Because Cornerstone HealthMD provides addiction medicine and substance use disorder treatment services, we protect the privacy and security of substance use disorder patient records in accordance with 42 U.S.C. § 290dd–2 and 42 C.F.R. Part 2 (the Confidentiality of Substance Use Disorder Patient Records, “Part 2”), in addition to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and applicable state law.

This Notice of Privacy Practices (“Notice”) describes our legal duties and privacy practices with respect to your health information. We are required by law to provide you with a copy of this Notice and to notify you following a breach of your unsecured protected health information.

We will follow the terms of this Notice. We reserve the right to change this Notice as permitted by law and to make the revised provisions effective for all health information we maintain, including information created or received before the change. If we make material changes to this Notice, we will promptly revise it. Each version will include an effective date on the first page. The most current Notice will be available on our website at https://cornerstonehealthmd.com.

Your Right to File a Complaint

You have the right to file a complaint if you believe your privacy rights have been violated.

You may file a complaint by contacting:

Cornerstone HealthMD
Attn: Privacy Officer
Email: support@cornerstonehealthmd.com
Phone: (844) 408-4884
Mailing Address: 673 River Oaks Ln, Evans GA 30809

You may also file a complaint with:

  • The Secretary of the U.S. Department of Health and Human Services
  • The United States Attorney for the judicial district in which the violation occurs
  • The Substance Abuse and Mental Health Services Administration (SAMHSA) office responsible for opioid treatment program oversight, where applicable

You will not be penalized or retaliated against for filing a complaint.

Uses and Disclosures of Your Health Information

We will obtain your written authorization to use or disclose your health information unless we are permitted or required to do so without authorization under applicable law. The following categories describe the ways we may use and disclose your health information without your written authorization, as permitted by 42 C.F.R. Part 2, HIPAA, and applicable state law. Where state law is more restrictive, we comply with the stricter law.

Within Our Organization

Cornerstone HealthMD personnel who have a legitimate need for your information in connection with diagnosis, treatment, referral for treatment, payment, or healthcare operations may access and use your health information.

Emergency Treatment

In the event of a bona fide medical emergency in which your prior authorization cannot reasonably be obtained, we may disclose necessary identifying information to medical personnel to provide emergency treatment, as permitted by law. Authorization will be obtained for non-emergent treatment when required.

Business Associates and Qualified Service Organizations

We may disclose your health information to third-party business associates and qualified service organizations that perform services on our behalf, including but not limited to:

  • Telemedicine platforms
  • Electronic Health Record (EHR) systems
  • Billing and payment services
  • Identity verification services
  • Secure communications and appointment reminders

These entities are required by law and contract to protect the privacy and security of your information.

Audits

We may disclose your health information to entities legally authorized to conduct audits or compliance reviews of our operations. Such entities are required to safeguard your information.

Legal Proceedings

We may disclose your health information pursuant to court orders, subpoenas, or other lawful processes that meet the requirements of applicable law.

Reporting Crimes on Our Premises or Against Our Personnel

We may disclose information regarding a patient’s commission or threatened commission of a crime on our premises or against our personnel to law enforcement officials, as permitted by law. Such disclosures may include limited identifying information and the circumstances of the incident.

Reporting Child Abuse or Neglect

We may report suspected child abuse or neglect to appropriate state or local authorities as required by law.

Deceased Persons

We may disclose information relating to the cause of death of a patient as required by laws governing death reporting or vital statistics.

Research

Under certain circumstances, we may disclose health information for approved research projects. Identifying information will not be published without your written authorization unless otherwise permitted by law.

FDA Reporting

We may disclose patient identifying information to the Food and Drug Administration (FDA) when necessary to report adverse events, product defects, or potential threats to patient safety.

Other Uses and Disclosures Requiring Authorization

Any use or disclosure of your health information for purposes not described above requires your written authorization, including:

  • Disclosure of your participation in addiction treatment
  • Use or disclosure of your information for marketing purposes
  • Sale of your health information

You may revoke an authorization at any time by submitting a written request. Revocation will not affect any use or disclosure that occurred before your revocation was received.

Your Rights Regarding Your Health Information

You have the following rights regarding the health information we maintain about you:

Right to Inspect and Copy

You may inspect and obtain a copy of your health information. Requests must be submitted in writing. Fees may apply as permitted by law. We may deny requests in limited circumstances, in which case you may request a review of the denial.

Right to Request Confidential Communications

You may request that we communicate with you in a specific manner or at a specific location. Reasonable requests will be honored.

Right to Amend

You may request correction of health information you believe is incorrect or incomplete. Requests must be in writing and include a reason. We may deny requests in certain circumstances, as permitted by law.

Right to an Accounting of Disclosures

You may request an accounting of certain disclosures made within the past six years. One accounting per year is provided at no charge.

Right to Request Restrictions

You may request restrictions on how your health information is used or disclosed. We are not required to agree to all requests, except where required by law.

Right to a Paper Copy

You may request a paper copy of this Notice at any time, even if you previously agreed to receive it electronically.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect your health information. All sensitive information, including Protected Health Information (PHI), is stored and transmitted in encrypted form, and access is limited to authorized personnel with a legitimate clinical or business need.

Contact Information

If you have questions or concerns about this Notice or your privacy rights, please contact:

Cornerstone HealthMD – Privacy Officer
Email: support@cornerstonehealthmd.com
Phone: 844 408 4884
Website: https://cornerstonehealthmd.com