LEGAL READY – Notice of Privacy Practices 1 – Interim

Focus On Health A Physical Therapy Corporation

Notice of Privacy Practices

Original Effective Date: July 16, 2026, Revised Effective Date: September 7, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

I. Our Contact Information

If you have any questions about this Notice or wish to exercise any of your privacy rights, please contact our Privacy Officer below:
Privacy Officer: Jeff Coyle
Practice Name: Focus On Health A Physical Therapy Corporation
Address: 1601 Dove Street, Ste 210, Newport Beach, CA 92660
Phone: (949) 851-8121

II. Our Commitment to Your Privacy

Focus On Health A Physical Therapy Corporation (“Focus On Health,” “we,” “our,” or “us”) is committed to protecting the privacy and security of your health information. This Notice describes how we may use and disclose your Protected Health Information (“PHI”), your rights regarding your PHI, and our legal obligations concerning your PHI.
PHI is information that identifies you and relates to your past, present, or future physical or mental health or condition, the health care services provided to you, or payment for those services. Focus On Health provides physical therapy and rehabilitation services. Although the legal definition of PHI includes information relating to both physical and mental health, the records we create and maintain relate to the physical therapy and rehabilitation services we provide. Examples of PHI include:
  • Medical history and demographic information
  • Physical therapy evaluations
  • Diagnoses, treatment, and progress notes
  • Other health-related information received or created in connection with your care.
  • Payment information
We are required by federal law, including the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), and applicable California law, including the California Confidentiality of Medical Information Act (“CMIA”), to:
  • Maintain the privacy and security of your PHI;
  • Provide you with this Notice describing our legal duties and privacy practices regarding your PHI;
  • Comply with the terms of the Notice currently in effect; and
  • Notify you following a breach of unsecured PHI when required by applicable law.
When using, disclosing, or requesting PHI, we will make reasonable efforts to limit PHI to the minimum necessary to accomplish the intended purpose, as required by applicable law. However, the minimum necessary standard does not apply to certain uses and disclosures, including disclosures to or requests by a health care provider for treatment purposes, disclosures to the individual who is the subject of the information, disclosures made pursuant to a valid authorization, disclosures required by law, and certain other uses and disclosures permitted or required by applicable law.

III. Permissible Uses and Disclosures Without Your Authorization

The following categories describe ways we may use and disclose your PHI without your written authorization, unless otherwise limited by applicable law.

1. Treatment

We may access, use, and disclose your PHI as necessary to deliver, coordinate, and oversee your health care services and related treatment activities. Such uses and disclosures support effective communication among health care professionals and help facilitate the continuity of your care.
Example: We may disclose your PHI to your referring physician, or another health care provider involved in your care, to ensure an integrated treatment plan.

2. Payment

We may use and disclose your PHI as necessary for payment-related activities associated with the health care services we provide.
Example: We may use your PHI to process payment for services provided and to maintain related payment records.

3. Health Care Operations

We may use and disclose your PHI for healthcare operations necessary to run our practice and ensure quality care. Examples include:
  • Quality assessment and improvement activities;
  • Clinical reviews;
  • Staff training and education; and
  • Business management and planning

4. Appointment Reminders, Schedule Changes, and Cancellations

We may contact you to provide appointment reminders, notify you of schedule changes or cancellations, and inform you of available openings. We may contact you by telephone, voicemail, text message, email, or other methods using the contact information you provide. These communications will be limited to information necessary for scheduling and administrative purposes. We will use reasonable safeguards to help protect your privacy when communicating with you. You may request that we use alternative methods of communication or limit certain types of contact, as described in this Notice. You may also request to opt out of certain electronic communications.

5. Business Associates

We may disclose your PHI to third-party service providers that perform services on our behalf, as needed.
These third parties are considered “Business Associates” under the Health Insurance Portability and Accountability Act (HIPAA). Our Business Associates are required by law and by written agreements to appropriately safeguard your PHI.

6. Individuals Involved in Your Care or Payment for Your Care

We may disclose PHI that is directly relevant to a person’s involvement in your care or payment for your care, for example, to:
  • Family members;
  • Other relatives;
  • Close personal friends; or
  • Other persons identified by you.
If you are present and have the capacity to make health care decisions, we may make such disclosures if you agree, provide you with an opportunity to object, and you do not object, or if we reasonably infer from the circumstances that you do not object.
If you are not present, are incapacitated, or are facing an emergency circumstance, we may, in the exercise of professional judgment, determine whether a disclosure is in your best interests and, if so, disclose only the PHI directly relevant to that person’s involvement in your care or payment for your care.
We may also disclose limited PHI for disaster relief purposes as permitted by applicable law.

7. Required by Law & Public Interest

We may use or disclose your PHI without your authorization when permitted or required by applicable federal and California law. This may include public health activities; reporting abuse, neglect, or domestic violence; health oversight activities; judicial, administrative, or law enforcement purposes; certain research activities; matters involving coroners, medical examiners, or funeral directors; organ and tissue donation; certain government functions; workers’ compensation; and situations involving a serious threat to health or safety.

IV. Uses and Disclosures Requiring Your Written Authorization

Except as described in this Notice, we will obtain your written authorization before using or disclosing your PHI.
The following uses and disclosures will be made only with your explicit written authorization:
  • Marketing: Most uses and disclosures of PHI for marketing purposes require your written authorization.
  • Sale of PHI: Any disclosure that constitutes a sale of your PHI.
  • Other Uses and Disclosures: Any use or disclosure of PHI not described in this Notice will be made only with your written authorization unless otherwise permitted or required by law.
  • Fundraising: Focus On Health does not use PHI for fundraising purposes.

Substance Use Disorder Records

To the extent that Focus On Health maintains substance use disorder patient records that are subject to 42 CFR Part 2, those records receive additional protections under federal law. We will not use or disclose such records in civil, criminal, administrative, or legislative investigations or proceedings against you unless permitted by applicable law, including where there is your written consent or an applicable court order and subpoena.

Additional Protections for Certain Health Information

Certain categories of health information may receive additional protections under federal or California law, including certain mental health information, HIV-related information, substance use disorder information, and other specially protected medical information. When a federal or California law provides greater privacy protection than HIPAA, Focus On Health will follow the more protective law and obtain any consent or authorization required by applicable law.

Revocation of Authorization

You may revoke an authorization at any time by submitting a written request to the Privacy Officer identified in Section I. Revocation will not affect actions already taken in reliance upon your authorization before we received your revocation.

V. Your Rights Regarding Your PHI

You possess the following rights regarding the PHI we maintain about you:

Inspect & Copy

You have the right to inspect and obtain a copy of your medical and billing records. Our records may be maintained in paper and/or electronic form. We may charge a reasonable, cost-based fee for copying and providing records, as permitted by applicable federal and California law. We will provide the information in the form and format you request when readily producible, as required by applicable law. To exercise this right, submit a written request to the Privacy Officer identified in Section I of this Notice.

Request Amendment

If you feel the PHI we have is incorrect or incomplete, you may ask us to amend it. The request must be made in writing and provide a supporting reason. We may deny your request under specific legal criteria. To exercise this right, submit a written request to the Privacy Officer identified in Section I of this Notice.

Accounting of Disclosures

You have the right to request an accounting of certain disclosures of your protected health information (PHI) made by us, as required by applicable law. This accounting does not include certain disclosures excluded by applicable law, including disclosures made for treatment, payment, or health care operations, or disclosures you have authorized. The first accounting request in any 12-month period is provided free of charge; additional requests may be subject to a reasonable, cost-based fee. To exercise this right, you must submit a written request to the Privacy Officer identified in Section I of this Notice.

Request Restrictions

You can ask us not to use or share certain PHI for treatment, payment, or operations. While we are not required to agree to most requests, we must agree to your request to restrict disclosure of PHI to a health plan when the disclosure is for payment or health care operations and the PHI relates solely to a health care item or service that you (or someone on your behalf) have paid for in full out of pocket. You retain the right to request this restriction.

Confidential Communications

You have the right to request that we communicate with you about medical matters in a certain way or at a certain location (e.g., home phone only, or via a specific mailing address). We will accommodate all reasonable requests. To exercise this right, submit a written request to the Privacy Officer identified in Section I of this Notice.

Personal Representative

If a person has legal authority to act for you regarding your health care or health information, we will recognize that person as your personal representative to the extent required by applicable law.

Paper Copy of This Notice

You may obtain a paper copy of this Notice upon request, even if you have agreed to receive the Notice electronically. This Notice is posted in our office and available upon request. To exercise this right, submit a written request to the Privacy Officer identified in Section I of this Notice.

VI. Changes to the Notice

We reserve the right to revise this Notice and make the revised Notice effective for all PHI we maintain, including information created or received before the revision.
The current version of this Notice will be available at our office, on our website, and upon request.

VII. State Laws

California law, including the Confidentiality of Medical Information Act (CMIA) and other applicable privacy laws, may provide greater protection than HIPAA. When California law is more protective, we will follow California law.

VIII. Complaints

If you believe your privacy rights have been violated, you may file a complaint with us by contacting the Privacy Officer identified in this Notice. You may also file a complaint with the Secretary of the U.S. Department of Health and Human Services.
You will not be retaliated against for filing a complaint.
Privacy Officer: Jeff Coyle
Practice Name: Focus On Health A Physical Therapy Corporation
Address: 1601 Dove Street, Ste 210, Newport Beach, CA 92660
Phone: (949) 851-8121
U.S. Department of Health and Human Services
Office for Civil Rights
Complaint Portal
https://ocrportal.hhs.gov/ocr/smartscreen/main.jsf
Phone
(800) 368-1019
TDD
(800) 537-7697
Website
https://www.hhs.gov/ocr
Address
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
Complaint filing instructions may change, and the current information is available from the OCR website.