Effective Date

This notice is effective as of July 18, 2026.

This page covers your clinical records and protected health information (PHI). For how this website handles data, see our Website Privacy Policy.

Extra Protection for Substance Use Records

Records that would identify you as someone seeking or receiving substance use disorder treatment are protected by a federal law and regulation — 42 U.S.C. § 290dd-2 and 42 CFR Part 2 — that is stricter than HIPAA. In general, we may not tell anyone outside Blue Heart Services that you are a patient, or share any information identifying you as a person with a substance use disorder, unless:

You consent in writing;
The disclosure is allowed by a court order issued under Part 2; or
The disclosure is made to medical personnel in a genuine medical emergency, or to qualified personnel for research, audit, or program evaluation.

Violation of the federal law and regulations by a program is a crime. Suspected violations may be reported to the appropriate authorities in accordance with federal regulations. Federal law and regulations do not protect information about a crime committed by a patient at the program or against program personnel, or information about suspected child abuse or neglect reported under state law.

How We May Use and Disclose Your Health Information

Subject to the stricter 42 CFR Part 2 rules above, we may use or disclose PHI:

For treatment — to provide, coordinate, and manage your care among the members of your treatment team.
For payment — to bill and collect payment for services, such as verifying coverage or submitting claims, with your written consent where Part 2 requires it.
For health care operations — quality improvement, training, licensing, and program administration.
When required or permitted by law — for example, reporting suspected child abuse or neglect, responding to a Part 2-compliant court order, medical emergencies, or reporting a crime on program premises or against program personnel.

Other uses and disclosures not described in this notice will be made only with your written authorization, which you may revoke at any time in writing, except to the extent we have already acted in reliance on it.

Your Rights

You have the right to:

Inspect and receive a copy of your health record, with limited exceptions;
Request corrections (amendments) to your record;
Request restrictions on certain uses and disclosures;
Request confidential communications (for example, a different phone number or mailing address);
Receive an accounting of certain disclosures we have made;
Receive a paper copy of this notice on request, even if you agreed to receive it electronically; and
Be notified if a breach of your unsecured PHI occurs.

Our Duties

We are required by law to maintain the privacy and security of your PHI.
We must follow the duties and privacy practices described in this notice and give you a copy of it.
We will not use or share your information other than as described here unless you tell us we can in writing.
We reserve the right to change this notice; changes apply to all information we hold, and the current notice will always be posted on this page and available at our office.

Questions and Complaints

If you believe your privacy rights have been violated, you may file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. We will not retaliate against you for filing a complaint.

Privacy Officer, Blue Heart Services: 513.790.3033 (TTY: 711) · info@findmyfreedom.org · 801 Evans Street, Suite 104, Cincinnati, Ohio 45204
HHS Office for Civil Rights: hhs.gov/ocr/complaints or 1-800-368-1019 (TDD: 1-800-537-7697)
Reports of 42 CFR Part 2 violations may also be directed to the appropriate federal authorities.