HIPAA NOTICE OF PRIVACY PRACTICES
NOTICE OF PRIVACY PRACTICES
THIS NOTICE DESCRIBES HOW INFORMATION ABOUT YOU AND YOUR TREATMENT MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
Kora Behavioral Health (“Kora,” “we,” or “our”) is required by law to maintain the privacy and confidentiality of your health information and to provide you with notice of its legal duties and privacy practices with respect to that information. We also ask that you respect the privacy of others receiving services at our facility.
Kora collects health information about you and stores it in an electronic health record. This record is the property of Kora, but the information it contains belongs to you. The Health Insurance Portability and Accountability Act (HIPAA) requires Kora to protect the privacy of your medical record and limits the use and disclosure of your information to the minimum necessary. HIPAA also provides you with certain rights regarding your health information, which are outlined below.
Information related to your treatment at Kora is also protected by federal regulations governing drug and alcohol treatment confidentiality, known as 42 CFR Part 2. These regulations protect the confidentiality of any information that identifies you as receiving or having received substance use disorder treatment. Kora may not disclose such information without your written consent except in very limited circumstances.
Under 42 CFR Part 2, any written consent to disclose treatment information must include the type of information to be disclosed, the parties who may receive the information, the purpose of the disclosure, and the timeframe of the consent. You may revoke your consent verbally or in writing at any time.
Kora may request your written consent to disclose treatment information for certain purposes, such as communicating with your other healthcare providers, obtaining payment from insurance, or contacting a family member for treatment-related reasons or in an emergency. We will not release this information without your consent unless permitted by law.
Kora may disclose certain treatment information without your written consent in limited circumstances allowed under 42 CFR Part 2. These include:
- Internal disclosures for treatment purposes or to entities under common administrative control
- Disclosures to qualified service organizations (e.g., billing, data storage) that agree to maintain confidentiality
- Disclosures to auditors, accreditation bodies, regulatory agencies, and certain approved research entities
- In a life-threatening medical emergency
- When reporting a crime on the premises or against Kora personnel
- Mandated reporting of child abuse or neglect under Pennsylvania law
- Reporting cause of death
- When required by a court order that meets strict federal criteria
Kora may also contact you with information about our services or to send reminders of upcoming appointments.
I. Your Health Information Rights
HIPAA and 42 CFR Part 2 provide you with the following rights regarding your health and treatment information:
- Right to a Copy of This Notice
You have the right to receive a paper copy of this Notice of Privacy Practices. - Right to Access Your Health Information
You may request a copy of your treatment record or ask to receive your information by alternative means or at an alternative location. All requests must be submitted in writing. A reasonable fee may apply for copying records. - Right to Request Amendment
You may request that Kora amend your health information if you believe it is incorrect or incomplete. If we deny your request, we will provide a written explanation and information on how to submit a statement of disagreement. - Right to Request Restrictions
You may request restrictions on how your information is used or disclosed. Kora is not required to agree to these restrictions, but if we do, we will abide by them unless otherwise permitted by law. - Right to an Accounting of Disclosures
You may request a written accounting of certain disclosures made by Kora during a period of up to six years. The accounting does not include disclosures made with your consent, those for treatment, payment, or operations, disclosures made directly to you, or disclosures to individuals involved in your care. The first request in a 12-month period is free; additional requests may incur a reasonable, cost-based fee.
II. Changes to This Notice of Privacy Practices
Kora reserves the right to amend this Notice at any time and to make the revised Notice effective for all information we maintain, including information created before the revision date. Until then, Kora is legally required to comply with this current Notice. Updated Notices will be made available to all current and future patients.
Effective Date: Dec 10, 2025
III. Complaints Regarding Privacy Practices
If you have concerns or complaints about this Notice or how Kora handles your privacy rights, please contact:
Kora Behavioral Health
1864 Oregon Pike, Lancaster PA, 17601
If you are not satisfied with our response, you may file a complaint with:
U.S. Department of Health & Human Services
Office for Civil Rights
200 Independence Avenue, SW
Room 509F, HHH Building
Washington, DC 20201
Pennsylvania Department of Drug and Alcohol Programs (DDAP)
Bureau of Program Licensure
625 Forster Street
Harrisburg, PA 17120
You may also submit complaints to any regional Office for Civil Rights. A directory is available at: https://www.hhs.gov/ocr/about-us/contact-us/index.html
