Skip to main content
Guzman & Baker is committed to protecting your privacy and handling your health information responsibly. This page describes how we collect, use, and safeguard your information, and explains the rights you have as a patient under federal law.

​
HIPAA compliance

Guzman & Baker complies fully with the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and all applicable state privacy laws. HIPAA establishes national standards for the protection of individually identifiable health information, known as Protected Health Information (PHI). Your PHI includes any information that could identify you and relates to your health condition, the care you receive, or the payment for that care. Examples include your name, date of birth, diagnosis, session notes, and insurance information.
As a patient, you will receive a copy of our Notice of Privacy Practices (NPP) at or before your first appointment. The NPP describes in detail how your information may be used and shared. Please review it and keep a copy for your records.

​
What information we collect

We collect the information necessary to provide you with high-quality mental health care and to process insurance claims. This includes:
  • Personal identification information (name, date of birth, address, contact details)
  • Health history and current mental health concerns
  • Treatment records, session notes, and clinical assessments
  • Insurance information and billing records
  • Emergency contact information

​
How we protect your information

Guzman & Baker uses a combination of administrative, physical, and technical safeguards to protect your health information:
  • Electronic health records are stored in a secure, HIPAA-compliant platform
  • Access to your records is limited to staff members directly involved in your care
  • Paper records are stored in locked files
  • All staff members receive HIPAA training
  • Business associates who handle your data are required to sign Business Associate Agreements

​
When we may share your information

We use and share your PHI only as permitted or required by HIPAA. This includes:
  • Treatment — Sharing information with providers involved in your care, including referral partners (with your consent).
  • Payment — Submitting claims to your insurance company.
  • Healthcare operations — Routine administrative activities such as quality review and staff training, using de-identified or limited data.
  • Required by law — Reporting to public health authorities, responding to court orders, or complying with mandatory reporting obligations.
  • With your authorization — Any sharing not covered above requires your written consent.
We will never sell your health information or share it for marketing purposes.

​
Your patient rights

Under HIPAA and applicable state law, you have the following rights regarding your health information:
  • Right to access — You may request a copy of your health records.
  • Right to amend — You may request a correction to your records if you believe they are inaccurate or incomplete.
  • Right to an accounting of disclosures — You may request a list of instances where we shared your information without your authorization.
  • Right to restrict — You may request that we limit how we use or share your information, subject to certain exceptions.
  • Right to confidential communications — You may request that we contact you by a specific method or at a specific address.
  • Right to a paper copy of the Notice of Privacy Practices — Available upon request at any time.

​
How to request your records

To request a copy of your health records, send us a secure message. You will be asked to complete a written authorization form. We will respond to your request within 30 days. There may be a reasonable fee for copying and transmitting records.
1

Contact our office

Send us a secure message to request a records release authorization form.
2

Complete the authorization form

Fill out and sign the form electronically, indicating what records you need and where you want them sent.
3

Submit the completed form

Return the signed form to our office.
4

Receive your records

We will process your request and provide your records within 30 days of receiving your completed authorization.

​
Contact us about privacy concerns

If you have questions about this privacy policy, want to exercise your patient rights, or believe your privacy rights have been violated, contact our Privacy Officer: You also have the right to file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at hhs.gov/ocr. Filing a complaint will not affect the care you receive from us.
This privacy policy may be updated periodically to reflect changes in law or our practices. The current version will always be available on our website.