HIPAA Compliance
Notice of Privacy Practices
Last Updated: January 20, 2026Griffin Concierge Medical (“GCM,” “we,” or “us”) is dedicated to protecting your health information and clearly explaining how it may be used and disclosed. This Notice outlines your rights and our responsibilities regarding your Protected Health Information (PHI).
Your Information. Your Rights.
This notice explains how your medical information may be used, disclosed, and accessed. Please review it carefully.
Your Patient Rights
When it comes to your health information, you have certain rights:
Access & Corrections
- Medical Records: Request electronic or paper copies.
- Corrections: Request changes to inaccurate or incomplete data.
- Disclosure List: Get a 6-year history of certain info sharing.
Communication & Control
- Confidentiality: Request specific contact methods or addresses.
- Restrictions: Limit sharing for treatment/payment/ops.
- Delegation: Choose a legal guardian or POA to act for you.
Our Uses and Disclosures
We typically use or share your health information in the following ways:
Standard Operations
- Treatment: Sharing with providers involved in your care.
- Payment: Information used to bill for your healthcare services.
- Operations: Managing and improving our practice services.
Public & Legal Benefit
- Public health and safety (diseases, recalls, abuse).
- Compliance with federal or state laws.
- Responding to court orders or subpoenas.
Written Permission Required
We will never share your information without written permission for marketing purposes, the sale of your information, or sharing psychotherapy notes.
Our Responsibilities
- We must maintain the privacy and security of your protected health information.
- We will notify you promptly if a breach occurs that compromises your information.
- We must follow the practices described in this notice until it is updated.
