HIPAA Compliance Policy

Effective Date: 08/23/2025

Texas Spine and Joint Rehabilitation complies with the Health Insurance Portability and Accountability Act (HIPAA) to protect patient health information (PHI).

1.Protected Health Information (PHI)

• PHI includes information that can identify you and relates to your health, medical history, treatment, or payment for services.

2. How We Use and Disclose PHI

We may use or disclose your PHI for:

• Treatment: To provide, coordinate, or manage your healthcare.

• Payment: To bill and collect payment for services provided.

• Healthcare Operations: For quality assessment, staff training, and clinic operations.

We may also disclose PHI when required by law or in emergencies to protect your health and safety.

3. Patient Rights Under HIPAA

You have the right to:

• Access and obtain a copy of your medical records.

• Request corrections to your records if you believe they are inaccurate.

• Request restrictions on how we use or disclose your PHI (though we may not always be able to accommodate).

• Request confidential communication (e.g., using an alternative phone number or address).

• Receive an accounting of certain disclosures of your PHI.

4. Safeguards to Protect PHI

• All PHI is stored securely in compliance with HIPAA standards.

• Access to PHI is limited to authorized staff.

• Electronic communications containing PHI are encrypted when possible.

5. Breach Notification

If a breach of unsecured PHI occurs, patients will be notified in accordance with HIPAA regulations.

6. Contact for HIPAA Concerns

If you have questions about our HIPAA practices or believe your rights have been violated, please contact our Privacy Officer at:

• HIPAA Compliance Contact: Dr. Daniel L Pennell, D.C.

• Email: DrPennell@tspineandjoint.com

• Phone: (972) 629-9181

• You may also file a complaint with the U.S. Department of Health and Human Services (HHS).