Effective date: July 28, 2026 · My Next Steps of Morganton, LLC
My Next Steps of Morganton is required by law to maintain the privacy of your protected health information ("PHI"), to provide you with this notice of our legal duties and privacy practices with respect to your PHI, and to notify you following a breach of unsecured PHI. We are required to abide by the terms of this notice while it is in effect.
If you receive treatment for a substance use disorder at our practice, your records are protected under a federal law and regulation known as 42 CFR Part 2, which is more stringent than HIPAA in many respects. Under 42 CFR Part 2, we generally cannot disclose information that would identify you as a patient receiving substance use disorder treatment, or disclose any information from your substance use disorder treatment records, without your specific written consent — even for purposes that HIPAA might otherwise permit, such as many law enforcement requests. A general authorization for the release of medical information is not sufficient to permit disclosure of these records. Federal rules also restrict any use of this information to investigate or prosecute a patient with a substance use disorder, except as specifically permitted by court order.
We use and disclose your health information for the following purposes:
We may use and disclose your PHI to provide, coordinate, or manage your care and related services, including coordination with other healthcare providers involved in your treatment, where permitted under 42 CFR Part 2.
We may use and disclose your PHI to obtain payment for services we provide to you, such as billing your insurance company or verifying coverage.
We may use and disclose your PHI for our own operations, such as quality improvement, staff training, licensing, and general administrative activities.
Outside of substance use disorder treatment records protected under 42 CFR Part 2, we may also be permitted or required by law to disclose your health information for purposes such as public health activities, health oversight activities, in response to a court order, or to avert a serious threat to health or safety. Where your records are protected under 42 CFR Part 2, additional consent or a qualifying court order is generally required before such disclosures may be made.
Other than as described in this notice, we will not use or disclose your health information without your written authorization. This includes, in particular, any disclosure of substance use disorder treatment records protected under 42 CFR Part 2. You may revoke an authorization at any time, in writing, except to the extent we have already relied on it.
To exercise any of these rights, please contact our Privacy Officer using the information below.
We reserve the right to change this notice and to make the revised notice effective for health information we already have as well as any information we receive in the future. The current notice will be available at our office and posted on our website.
If you believe your privacy rights have been violated, you may file a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services, Office for Civil Rights. You will not be retaliated against for filing a complaint.
Privacy Officer: Tonya Hamby, CEO & Founder
My Next Steps of Morganton, LLC
712 Jamestown Rd, Morganton, NC 28655
Phone: (828) 608-0953 · Fax: (828) 608-0954
