NOTICE OF PRIVACY PRACTICES (NPP) OF Wasatch Peak Physical Therapy
Effective Date: February 16, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
1. Our Legal Duty
Wasatch Peak Physical Therapy is required by applicable federal and state law to maintain the privacy of your Protected Health Information (PHI) and to provide you with this Notice detailing our legal duties and privacy practices. We are required to abide by the terms of this Notice currently in effect and to notify you following a breach of unsecured PHI.
We reserve the right to change our privacy practices and the terms of this Notice at any time, provided such changes are permitted by applicable law. We reserve the right to make the changes in our privacy practices and the new terms of our Notice effective for all health information that we maintain, including health information we created or received before we made the changes.
2. Alignment with 42 CFR Part 2 (Substance Use Disorder Records)
Pursuant to the CARES Act and the 2024 Final Rule, if we create, receive, maintain, or transmit Substance Use Disorder (SUD) records protected by 42 CFR Part 2 (“Part 2 records”), we apply the following protections in addition to HIPAA:
- Consent and Permitted Uses/Disclosures: We will obtain your written consent before using or disclosing Part 2 records for treatment, payment, and healthcare operations (TPO).
- TPO and Redisclosure: Once we have your initial written consent for TPO, we may use and disclose those records as permitted by HIPAA. This includes “redisclosure”—meaning other healthcare providers or insurance companies who receive your records from us may also use and disclose them for TPO purposes as permitted by HIPAA, unless you revoke your consent.
- Legal Protections in Proceedings: Your Part 2 records (and any testimony derived from them) are strictly protected and generally may not be used to initiate or substantiate criminal, civil, administrative, or legislative investigations or proceedings against you without a specific court order or your written consent.
- Record of Shared Information: For Part 2 records, you have a right to a list (an accounting) of disclosures made through an electronic health record for TPO purposes for up to 3 years prior to your request.
3. Uses and Disclosures of Health Information
We may use and disclose your PHI for the following purposes:
- Treatment: We may disclose your PHI to a physician, nurse, or other healthcare provider providing treatment to you.
- Payment: We may use and disclose your PHI to obtain payment for services we provide to you.
- Healthcare Operations: We may use and disclose your PHI in connection with our healthcare operations, including quality assessment and improvement activities.
- Marketing and Sale of PHI: We will not sell your PHI or use your PHI for marketing purposes that involve financial remuneration from a third party without your express written authorization.
- Fundraising: We may contact you for fundraising efforts. You have the right to opt out of receiving such communications at any time.
- Disclosures to Family and Friends: Unless you object, we may disclose PHI to a family member or friend involved in your care or payment.
- State-Specific Protections (Utah): We follow more restrictive state laws regarding genetic testing (Utah Code § 26B-8-401), and mental health records.
4. Patient Rights
- Access and Third-Party Directives: You have the right to inspect or obtain copies of your PHI. You may request these records in digital/electronic format. You also have the right to direct us to send a copy of your PHI directly to another person or entity (a third-party directive) if your request is in writing, signed, and clearly identifies the designated person and where to send the information. We may charge a reasonable, cost-based fee.
- Record of Shared Information: You have the right to receive a list of instances in which we or our business associates disclosed your PHI for purposes other than treatment, payment, healthcare operations, and certain other activities.
- Restriction: You have the right to request additional restrictions on our use or disclosure of your PHI. We must agree to a request to restrict disclosure of PHI to a health plan if the disclosure is for the purpose of carrying out payment or healthcare operations and the PHI pertains solely to a healthcare item or service for which you have paid us in full out-of-pocket.
- Amendment: You have the right to request that we amend your PHI. Your request must be in writing and explain the reason for the amendment.
- Confidential Communications: You have the right to request that we communicate with you in a specific manner or at a specific location.
- Personal Representative: If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your PHI. We will confirm the person’s authority before we take any action.
- Paper Copy: You have the right to a paper copy of this Notice at any time, even if you have agreed to receive it electronically.
- Revocation: You may revoke any authorization or consent you provided in writing at any time, except to the extent we have already taken action in reliance on it.
5. Breach Notification
In the event of a breach of your unsecured PHI, we will notify you as required by law. Notifications will be made via first-class mail (or email if you have opted in) without unreasonable delay and in no case later than 60 days following the discovery of the breach.
6. Changes to this Notice
We reserve the right to change our privacy practices. If we make material changes, we will post the updated Notice on our website and make copies available in our office.
7. Complaints and Contact Information
If you believe your privacy rights have been violated, you may file a complaint with us or the Secretary of the U.S. Department of Health and Human Services. We will not retaliate against you in any way for filing a complaint.
To file a complaint with us:
Privacy Officer: Jason Huffaker
Telephone: 801-825-8091
Email: jason@wasatchpeak.com
Address:
Wasatch Peak Physical Therapy
1492 W. Antelope Dr. STE 100
Layton, UT 84041
To file a complaint with the U.S. Department of Health and Human Services:
Online: Office for Civil Rights (OCR) Complaint Portal at https://ocrportal.hhs.gov