Privacy Policy

HIPAA Notice of Privacy Practices

Effective: April 14, 2003
Revised: February 16, 2026

Men’s Health Boston
200 Boylston Street, A309
Chestnut Hill, MA 02467
Phone: 617-277-5000
Fax: 617-277-5444
Email: info@menshealthboston.com

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

This Notice of Privacy Practices is not an authorization. It describes how we, our Business Associates, and their subcontractors may use and disclose your Protected Health Information (PHI) for Treatment, Payment, and Health Care Operations (TPO), and for other purposes permitted or required by law. It also describes your rights regarding your PHI.

By signing the Acknowledgement form, you are only acknowledging that you received, or had the opportunity to receive, a copy of this Notice.

We reserve the right to change this notice at any time and to make the revised notice effective in the future. A current copy will always be posted in our waiting area. You may also obtain a copy from our website at www.menshealthboston.com or by calling the Privacy Officer at 617-277-5000.

Protected Health Information includes information about your past, present, or future physical or mental health condition, genetic information, or health care benefits when combined with identifying information such as your name, address, Social Security number, or phone number.

Uses and Disclosures of Protected Health Information

There are situations where we do not need your written authorization before using or disclosing your health information, including:

Treatment

We may use and disclose your PHI to provide, coordinate, or manage your health care. For example, information may be shared with a physician to whom you are referred.

Payment

We may use your PHI to obtain payment for services provided, including sharing information with your health insurance company.

Health Care Operations

We may use or disclose PHI to support our business operations, including quality assessment, employee review, training, licensing, fundraising, and other administrative activities.

Appointment Reminders and Health-Related Services

We may contact you to remind you of appointments or inform you of treatment alternatives or health-related services. If PHI is used for fundraising, you will have the opportunity to opt out.

Friends and Family Involved in Your Care

If you do not object, we may share your health information with family members or others involved in your care or payment, including after your death.

Business Associates

We may disclose PHI to business associates such as billing companies, accountants, or attorneys who assist us. These parties are required by law to protect your information.

Proof of Immunization

We may disclose proof of immunization to schools as required by law with appropriate authorization.

Incidental Disclosures

Certain disclosures may occur as a byproduct of permitted uses, despite reasonable safeguards.

Emergencies or Public Need

We may use or disclose PHI as required by law, for public health activities, law enforcement, abuse or neglect reporting, health oversight, legal proceedings, national security, workers’ compensation, and other legally required purposes.

Research

We may disclose PHI for research approved by an Institutional Review Board or privacy board when authorization is not required.

SUD Records Disclosure and Protections

Substance Use Disorder (SUD) treatment records are protected by federal law (42 CFR Part 2 and HIPAA). These records generally cannot be disclosed without your written consent.

• Legal Proceedings: SUD records generally cannot be used in legal proceedings without specific consent or a court order.
• Redisclosure: Redisclosure is prohibited unless allowed under law with appropriate agreements.
• Counseling Notes: Require separate, specific consent.
• Fundraising: Patients must be given an opt-out opportunity.
• Exceptions: Medical emergencies, child abuse reporting, or crimes on premises.
• Stricter State Laws: More protective state laws apply when applicable.

Requirement for Written Authorization

Written authorization is required for:

• Most uses of psychotherapy notes
• Marketing involving financial remuneration
• Sale of Protected Health Information

You may revoke authorization at any time in writing, except where we have already relied upon it.

Patient Rights

• Inspect and Copy Records: You may request access to your medical and billing records.
• Amend Records: You may request corrections to your health information.
• Accounting of Disclosures: You may request a list of certain disclosures.
• Breach Notification: You will be notified of breaches of unsecured PHI.
• Request Restrictions: You may request limits on certain disclosures.
• Confidential Communications: You may request alternative communication methods.
• Personal Representative: You may designate someone to act on your behalf.
• Paper Copy: You may request a paper copy of this Notice.
• File a Complaint: You may file a complaint without fear of retaliation.

For complaints, contact the Privacy Officer at 617-277-5000 or the U.S. Department of Health and Human Services, Office for Civil Rights at 1-800-368-1019.

Special Protections

Certain information such as substance abuse treatment, HIV-related information, mental health, psychotherapy notes, and genetic information may be subject to additional protections under state or federal law.