Your Records & Your Rights
In accordance with the requirements of the Health Insurance Portability and Accountability Act (HIPAA) of 1996, NCA-BA is committed to ensuring and maintaining the confidentiality, privacy and security of all protected health information related to our clients and program participants.


General Information regarding your health care, including payment for health care, is protected by two federal laws: the Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C. § 1320d et. seq., 45 C.F.R., Parts 160 & 164, and the Confidentiality Law, 42 U.S.C. § 290dd-2, 42 C.F.R., Part 2. Under these laws, NCA-BA may not say to a person outside the agency that you receive services through this agency, nor may this agency disclose any information identifying you as an alcohol or other drug abuser, or disclose any other protected information except as permitted by federal law.

Written Consent from you must obtained before we can disclose information about you for payment purposes. For example, this agency must obtain your written consent before we can disclose information to your health insurer in order to be paid for services. Generally, you must also sign a written consent before this agency can share information for treatment purposes or for healthcare operations. However, federal law permits this program to disclose information without written permission:

- Pursuant to an agreement with a business associate;
- For research, audit or evaluations;
- To report a crime committed on this agency’s premises or against personnel of the agency;
- To medical personnel in a medical emergency;
- To appropriate authorities is to report suspected child abuse or neglect;
- To appropriate authorities to anonymously or by court order report suspected abuse or neglect of an elderly person or a vulnerable adult; and/or as allowed by a court order. For example, this agency can disclose information without your consent to obtain legal or financial services, or to another medical facility to provide health care to you, as long as there is a business associate agreement in place.

Before this agency can use or disclose any information about your health in a manner that is not described above, it must first obtain your specific written consent allowing it to make the disclosure. Any such written consent may be revoked by you in writing.

Under HIPAA, you have the right to request restrictions on certain uses and disclosures of your health information. This agency is not required to agree to any restrictions you request, but if it does agree, it is bound by that agreement and may not use or disclose any information that you have restricted, except as necessary in a medical emergency. You have the right to request that representatives of this agency communicate with you by alternative means or at an alternative location. This agency will accommodate such requests that are reasonable and will to request an explanation from you. Under HIPAA, you also have the right to inspect and copy your own health information maintained by this agency, except to the extent that the information contains psychotherapy notes or information complied for use in a civil, criminal or administrative proceeding or in other limited circumstances. Under HIPAA, you also have the right, with some exceptions, to amend healthcare information maintained in this agency’s records, and to request and receive an accounting of disclosures of your health-related information made by this agency during the six years prior to your request. You also have the right to receive a paper copy of this notice.

To Request Access to Your File:
1. Submit a written request.
2. The request will be reviewed by the appropriate staff and Privacy Officer.
3. An appointment will be made with a counselor to review the record, whenever possible.
4 A client will be provided a copy of their clinical record. Allow five business days for copies to be available. A $15 processing fee is required at the time of request.

NCA-BA is required by law to maintain the privacy of your health information and to provide you with notice of its legal duties and privacy practices with respect to your health information. This agency is required by law to abide by the terms of this notice. This agency reserves the right to change the terms of this notice and to make new notice provisions effective for all protected health information that it maintains. You will receive a copy of this notice at registration/intake. When changes are made to this document, current clients will be contacted with the revisions.

If you believe that your privacy rights under HIPAA have been violated while receiving services at NCA-BA, you may complain to this agency by sending a written letter describing the cause of your concern to the following address: NCA-BA 1170 Market Street, 6th floor San Francisco, CA 94102 Att: Fay Zenoff, Executive Director and Privacy Officer. You may also complain directly to the Secretary of the United States Department of Health and Human Services. You will not be retaliated against for filing such complaint.

Violation of the Confidentiality Law by a program is a crime. Suspected violations of the Confidentiality Law may be reported to the United States Attorney in the district in which the violation occurs.

For more information please email us at or call us at 415-296-9900.

Leave a Reply