NOTICE OF PRIVACY PRACTICES
Practice
Yvette Lawhorn, PLLC
Clinician
Yvette Lawhorn, MA, LMHC, LSW
Massachusetts LMHC License No. LMHC10002684
Contact
20 Forest Street, Unit 8, Medford, MA 02155
617-468-8570 | yvette@yvettelawhorn.com | yvettelawhorn.com
Privacy Officer
Yvette Lawhorn | Effective date: August 6, 2026
THIS NOTICE DESCRIBES HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED, HOW YOU MAY ACCESS IT, AND YOUR PRIVACY RIGHTS. PLEASE REVIEW IT CAREFULLY.
1. My Pledge Regarding Your Health Information
Information about you and your health care is personal. I am committed to protecting it. I create and maintain a record of the care and services you receive from my practice so that I can provide treatment, bill for services, operate the practice, and meet legal and professional obligations. This Notice applies to health information created or maintained by Yvette Lawhorn, PLLC.
I am required by law to:
· Maintain the privacy and security of protected health information (PHI) that identifies you.
· Give you this Notice explaining my legal duties and privacy practices.
· Follow the terms of the Notice that is currently in effect.
· Notify you as required if a breach may have compromised the privacy or security of your information.
· Use or disclose your information only as described in this Notice or as otherwise permitted or required by law.
2. How I May Use and Disclose Health Information
HIPAA allows certain uses and disclosures without a separate written authorization. Massachusetts law gives mental health communications and treatment information additional confidentiality protections. When Massachusetts or another law is more protective than HIPAA, I will follow the more protective law.
Treatment
I may use your information to provide, coordinate, or manage your treatment. This may include professional consultation, referrals, or communication with another health care professional when permitted by law. Because Massachusetts mental health information is specially protected, I generally obtain your written authorization before routine communication with an outside provider unless the disclosure is otherwise permitted or required by law.
Payment
I may use and disclose information to verify insurance benefits, submit and correct claims, obtain payment, respond to utilization review or audit requests, collect amounts you owe, and address payer recoupments or appeals. Insurance billing may cause the policyholder or subscriber to receive an explanation of benefits or another communication that identifies the provider, date, type, or cost of services.
Health Care Operations
I may use and disclose information for lawful practice operations, including quality review, compliance, credentialing, legal or accounting consultation, business planning, security, records management, and contacting you when necessary.
Business Associates and Practice Vendors
I may allow contracted service providers to create, receive, maintain, or transmit PHI when they perform services for the practice, such as electronic health records, secure email, telehealth, fax, billing, payment processing, data storage, technology support, legal, or accounting services. When required, these providers sign written business associate agreements and may use your information only as allowed by law and their agreement with the practice.
Supervision and Professional Consultation
I may consult with appropriately licensed professionals when clinically indicated. I will use reasonable efforts to omit your name and unnecessary identifying information. Information shared for consultation remains confidential and is limited to what is reasonably necessary.
3. Uses and Disclosures That Generally Require Your Written Authorization
Psychotherapy Notes
I maintain psychotherapy notes as that term is defined by HIPAA. These are notes recorded by me that document or analyze the contents of a counseling conversation and are kept separate from the rest of your clinical record. Most uses or disclosures of psychotherapy notes require your written authorization. Authorization is not required for limited purposes permitted by law, including my use in treating you; certain training or supervision; defending myself in a legal or disciplinary proceeding brought by you; oversight of my compliance with HIPAA; uses or disclosures required by law; certain oversight of the originator of the notes; use by a coroner or medical examiner as authorized by law; or use necessary to avert a serious threat to health or safety.
Marketing, Sale of Information, and Other Uses
· I will not use or disclose your PHI for marketing purposes without your written authorization.
· I will not sell your PHI in the regular course of business.
· Uses or disclosures not described in this Notice will be made only with your written authorization unless otherwise permitted or required by law.
· You may revoke an authorization in writing at any time, except to the extent that I have already acted in reliance on it.
4. Uses and Disclosures That May Occur Without Your Authorization
Subject to the conditions and limits imposed by federal and Massachusetts law, I may use or disclose PHI without your authorization for the following purposes:
· Required by law: when state or federal law requires disclosure and the disclosure is limited to what the law requires.
· Abuse or neglect reporting: to report suspected abuse or neglect of a child, an older adult, or a person with a disability, as required by law.
· Serious threats and emergencies: to prevent or lessen a serious and imminent threat to you or another person, or to arrange emergency evaluation, hospitalization, or other safety intervention.
· Public health activities: for public health purposes authorized by law.
· Health oversight: for legally authorized audits, investigations, inspections, licensing, or disciplinary activities.
· Judicial and administrative proceedings: in response to a valid court or administrative order or other legal process that satisfies HIPAA and Massachusetts mental health confidentiality and privilege requirements. A subpoena alone is not treated as automatic permission to release your psychotherapy record.
· Law enforcement and government functions: when specifically authorized or required by law, including certain correctional, military, national-security, or protective-service functions.
· Coroners, medical examiners, and funeral directors: as authorized by law when a person dies.
· Workers' compensation and similar programs: as necessary to comply with laws governing work-related injuries or benefits.
· Research: only when the applicable authorization, waiver, or other legal requirements have been satisfied.
· Appointment reminders and information about services: to contact you about appointments, treatment alternatives, or health-related services offered by the practice.
· Defense of the practice: as permitted by law when information is necessary to defend me or the practice in a legal, licensing, disciplinary, or malpractice matter.
5. Uses and Disclosures for Which You Have a Choice
You may tell me whether and how you want information shared with a family member, close friend, or another person involved in your care or payment for care. If you are unable to state a preference, I may share limited information when permitted by law and when, in my professional judgment, it is in your best interest or necessary to address an emergency. You may object to or limit these disclosures.
6. Substance Use Disorder Records Protected by 42 C.F.R. Part 2
To the extent that I receive or maintain substance use disorder patient records that are protected by 42 C.F.R. Part 2, those records will not be used or disclosed in a civil, criminal, administrative, or legislative investigation or proceeding against you without your written consent or a qualifying court order and subpoena, except as otherwise permitted by law. Additional consent requirements may apply to substance use disorder counseling notes.
7. Your Rights Regarding Your Health Information
Request access or a copy. You may ask to inspect or obtain an electronic or paper copy of your clinical and billing record and other information used to make decisions about you. Psychotherapy notes are generally excluded from the HIPAA right of access. I will usually provide a copy or agreed-upon summary within 30 days and may charge a reasonable, cost-based fee allowed by law. An unpaid balance will not be used to deny access to records.
Request a correction or amendment. You may ask me to correct or add to information that you believe is incorrect or incomplete. I may deny the request for reasons allowed by law, but I will provide a written explanation when required. You may submit a statement of disagreement for inclusion in the record when applicable.
Request confidential communications. You may ask me to contact you in a particular way or at a different address. I will agree to reasonable requests. You are responsible for providing accurate contact instructions and updating them when they change.
Request limits on uses or disclosures. You may ask me not to use or disclose certain information for treatment, payment, or health care operations. I am not required to agree to most requests. If I agree, I will follow the restriction except as permitted by law, including when information is needed for emergency treatment.
Request a restriction when you pay in full. If you pay in full out of pocket for a specific service, you may ask me not to disclose information about that service to your health plan for payment or health care operations. I will agree unless disclosure is required by law.
Request an accounting of disclosures. You may request a list of certain disclosures made during the six years before your request. The accounting generally does not include disclosures for treatment, payment, health care operations, disclosures you authorized, or other disclosures excluded by law. One accounting in a 12-month period is free; a reasonable, cost-based fee may apply to an additional request.
Choose a personal representative. A person with legal authority to act for you, such as a legal guardian or properly authorized health care agent, may exercise your privacy rights. I will verify the person's authority before acting.
Receive another copy of this Notice. You may request a paper or electronic copy at any time, even if you previously received it electronically.
File a complaint. You may complain to me or to the U.S. Department of Health and Human Services, Office for Civil Rights, if you believe your privacy rights were violated. I will not retaliate against you for filing a complaint.
8. Additional Massachusetts Mental Health Privacy Protections
· Communications between a Massachusetts allied mental health professional and a client are confidential, subject to limited exceptions under law.
· Mental health communications may be privileged in court, legislative, and administrative proceedings, subject to statutory exceptions.
· Treatment records are maintained for at least seven years after the last professional contact. For a minor, records are retained for at least one year after the client reaches age 18 and never for less than seven years, unless a longer period is required by another law or contract.
· Confidentiality is protected when records are created, stored, transmitted, transferred, disposed of, or managed during practice closure, incapacity, or death.
· This Notice is separate from informed consent to treatment and separate from any authorization to disclose information.
9. Changes to This Notice
I may change the terms of this Notice and make the revised terms apply to all information maintained by the practice, including information created or received before the change. The current Notice will be available upon request, through the client portal, and on the practice website.
10. Questions or Complaints
Contact the Privacy Officer:
Yvette Lawhorn
Yvette Lawhorn, PLLC
20 Forest Street, Unit 8, Medford, MA 02155
Phone: 617-468-8570
Email: yvette@yvettelawhorn.com
Website: yvettelawhorn.com
You may also file a complaint with the U.S. Department of Health and Human Services, Office for Civil Rights, by mail at 200 Independence Avenue, S.W., Washington, D.C. 20201, by telephone at 1-877-696-6775, or through the complaint process described at hhs.gov/hipaa/filing-a-complaint.