Alma Recovery Center
Notice of Privacy Practice

Effective Date: 04/01/2026 This notice was last reviewed: 04/01/2026

Alma Recovery Center 717 Encino Pl NE, Ste 19-23 | Albuquerque, NM 87102 (505) 917-3098 | Admin@almarecovery.com | www.almarecovery.com

This Notice applies to:

• Alma Recovery Center and all of its programs and services
• All workforce members, volunteers, trainees, and contractors who handle your health information on our behalf

We are required by law to:

• Maintain the privacy and security of your protected health information
• Provide you with this Notice before or at the time of your first service encounter
• Follow the terms of the Notice currently in effect
• Notify you promptly in the event of a breach of your unsecured PHI

Because we are a federally assisted substance use disorder treatment program, your records are protected by 42 CFR Part 2 in addition to HIPAA. These protections are among the strongest in federal law.

Under 42 CFR Part 2, we are prohibited from:

• Disclosing that you are or have ever been a client at Alma Recovery Center
• Sharing any information from your records without your written consent, except in very limited circumstances described below
• Releasing your records in response to a subpoena or court order unless specific legal requirements are met

Disclosures we may make without your written consent under 42 CFR Part 2:

• To medical personnel in a bona fide medical emergency
• To qualified personnel conducting scientific research, audit, or program evaluation, under strict conditions that prevent re-disclosure
• As required by a court order that meets the specific standards of 42 CFR Part 2
• To report suspected child abuse or neglect, as required by New Mexico state law
• To our own staff for purposes of treatment, payment, and operations — within the limits of this Notice

The following describes the ways we may use and share your PHI. Not all of these will apply to every client.

Treatment

We may use and share your information to provide, coordinate, and manage your care. For example, we may share relevant information with a physician, specialist, hospital, or other provider involved in your treatment, with your written consent where required by 42 CFR Part 2.

Payment

We may use your information to bill for services and obtain payment from you or your insurance company. This includes sharing information necessary for prior authorization, claims processing, and benefit verification.

Healthcare Operations

We may use your information for internal activities that support the quality and effectiveness of our services, including:

• Quality assessment and improvement activities
• Staff training and supervision
• Accreditation, licensing, and credentialing
• Business planning and administration
• Legal and compliance activities

As Required by Law

We may disclose your information when federal, state, or local law requires it, including mandatory reporting obligations.

Public Health and Safety

We may disclose limited information to public health authorities to prevent or control disease, report adverse events, or address serious threats to health or safety, as permitted by law.

Medical Emergencies

We may disclose information necessary to prevent or lessen a serious and imminent threat to your life or safety or the life or safety of another person.

Abuse or Neglect Reporting

We are required by New Mexico law to report suspected abuse or neglect of a child or vulnerable adult to the appropriate authorities, even without your consent.

Judicial and Administrative Proceedings

We may disclose your information in response to a court order that meets the requirements of both HIPAA and 42 CFR Part 2. A standard subpoena is not sufficient to compel disclosure of substance use treatment records.

Health Oversight Activities

We may disclose information to government agencies conducting audits, investigations, or oversight of the healthcare system as authorized by law.

Appointment Reminders and Health Information

We may contact you to remind you of upcoming appointments or to provide information about treatment options or services that may be of benefit to you.

Business Associates

We work with certain third-party vendors and service providers (“Business Associates”) who assist us in operating our programs. These vendors are permitted to access PHI only as necessary to perform services on our behalf, and all are required to protect your information under a signed Business Associate Agreement (BAA).

We will not use or disclose your PHI for the following purposes without your prior written authorization:

• Any disclosure covered by 42 CFR Part 2 that is not described above
• Marketing communications
• Sale of your health information
• Disclosure of psychotherapy notes (in most circumstances)
• Any other use or disclosure not described in this Notice

You may revoke your authorization at any time by submitting a written request to our Privacy Officer. Revocation will be effective immediately, except where we have already acted in reliance on your authorization.

You have the following rights with respect to your PHI. To exercise any of these rights, please submit a written request to our Privacy Officer using the contact information at the end of this Notice.

Right to Access Your Records

You have the right to inspect and receive a copy of your medical records and other PHI we maintain about you. We will respond to your request within 30 days. We may charge a reasonable, cost-based fee for copies. In limited circumstances, we may deny access and will explain the reason in writing.

Right to Request an Amendment

If you believe your records are inaccurate or incomplete, you may request an amendment in writing. We will respond within 60 days. If we deny your request, we will explain why and inform you of your right to submit a statement of disagreement.

Right to an Accounting of Disclosures

You may request a written list of certain disclosures we have made of your PHI during the past six years, other than disclosures made for treatment, payment, or healthcare operations. We will provide the first accounting in any 12-month period free of charge.

Right to Request Restrictions

You may request that we restrict how we use or disclose your PHI. We are not required to agree to most restrictions. However, if you have paid out of pocket in full for a service, you have the right to request that we not share information about that service with your health plan, and we are required to honor that request.

Right to Request Confidential Communications

You may request that we communicate with you through specific means or at a specific location — for example, by mail only, or only at a particular phone number. We will honor reasonable requests without requiring you to explain your reasons.

Right to a Paper Copy of This Notice

You may request a paper copy of this Notice at any time, even if you previously received it electronically or agreed to receive it electronically.

Right to Be Notified of a Breach

If your unsecured PHI is compromised in a breach, we are required to notify you promptly in accordance with federal law.

All requests must be submitted in writing to:

Privacy Officer Alma Recovery Center 717 Encino Pl NE, Ste 19-23 Albuquerque, NM 87102 Phone: (505) 917-3098 Email: Admin@almarecovery.com

We will not retaliate against you in any way for exercising your privacy rights.

If you believe your privacy rights have been violated, you may file a complaint with:

Alma Recovery Center Privacy Officer Using the contact information above

— or —

U.S. Department of Health and Human Services Office for Civil Rights 200 Independence Ave SW, Washington, DC 20201 Phone: 1-800-368-1019 | TDD: 1-800-537-7697 Website: www.hhs.gov/ocr/privacy/hipaa/complaints

You will not be penalized, retaliated against, or denied services for filing a complaint.

We reserve the right to change this Notice and to make the revised Notice effective for PHI we already maintain as well as PHI we receive in the future. The current version of this Notice will always be available at our facility and on our website at almarecovery.com. You may request a copy of the current Notice at any time.

To be completed at intake and retained in the client record.

I acknowledge that I have received, or was offered and declined, a copy of the Alma Recovery Center Notice of Privacy Practices.

Client Printed Name: ________________________________________

Client Signature: ____________________________________________

Date: _____________________

 

If client is unable or unwilling to sign, staff must document the reason:

_____________________________________________________________________________________________

Staff Name & Signature: ____________________________________________________________________

Date: _____________________