Notice of Privacy Practices
Effective Date: August 9, 2026
THIS NOTICE DESCRIBES HOW YOUR MEDICAL INFORMATION MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
At Dana Stern MD PC, we understand that your medical information is personal and confidential. We are committed to protecting your privacy while providing exceptional care.
This Notice describes how we may use and disclose your Protected Health Information (“PHI”), your rights regarding your medical information, and our legal responsibilities under the Health Insurance Portability and Accountability Act (“HIPAA”).
Our Responsibilities
Dana Stern MD PC is required by law to:
Maintain the privacy and security of your Protected Health Information (PHI).
Provide you with this Notice of Privacy Practices.
Follow the terms of the Notice currently in effect.
Notify you if a breach occurs that may have compromised the privacy or security of your information, as required by law.
We reserve the right to revise this Notice at any time. Any revised Notice will apply to all information maintained by our practice and will be posted on our Website.
How We May Use and Disclose Your Medical Information
The following are examples of how we may use or disclose your health information without your written authorization, as permitted by law.
Treatment
We may use or share your medical information to provide, coordinate, or manage your healthcare.
Examples include:
Reviewing photographs submitted for evaluation.
Communicating with your referring physician.
Consulting with another healthcare provider involved in your care.
Coordinating follow-up care.
Reviewing outside medical records that you authorize us to obtain or provide.
Payment
We may use your information as necessary to obtain payment for healthcare services.
Examples include:
Preparing invoices.
Processing payments.
Verifying insurance information when applicable.
Responding to insurance inquiries regarding covered services.
Healthcare Operations
We may use your information to operate and improve our practice.
Examples include:
Quality improvement activities.
Staff training.
Business management.
Credentialing.
Compliance reviews.
Risk management.
Audits.
Appointment Communications
We may contact you regarding:
Appointment confirmations
Appointment reminders
Follow-up care
Administrative questions
Practice updates related to your care
These communications may occur by telephone, voicemail, secure email, text message, patient portal, or other secure communication methods you authorize.
Individuals Involved in Your Care
Unless you object, we may share relevant information with a family member, caregiver, or other individual involved in your care when appropriate.
As Required by Law
We may disclose information when required by federal, state, or local law.
Examples include:
Public health reporting
Court orders
Law enforcement requests when legally authorized
Health oversight activities
Reporting abuse or neglect
Preventing serious threats to health or safety
Research
Your information may be used or disclosed for research only when permitted or required by law and subject to appropriate protections.
Business Associates
We work with carefully selected companies that help us operate our practice.
These companies may provide services such as:
HIPAA-compliant communications
Secure electronic forms
Information technology support
Website hosting
Practice management services
Billing services
Data storage
When these companies require access to Protected Health Information, they are required by law and contract to safeguard your information\
Uses That Require Your Written Authorization
We will obtain your written authorization before using or disclosing your Protected Health Information for purposes not otherwise permitted by law.
Examples include:
Marketing communications where authorization is required
Most disclosures of psychotherapy notes (if applicable)
Other uses required by HIPAA
You may revoke an authorization at any time in writing, except to the extent we have already relied upon it.
Your Rights
You have the following rights regarding your Protected Health Information.
Right to Inspect and Obtain Copies
You may request access to your medical records and certain other health information maintained by our practice.
Reasonable fees may apply where permitted by law.
Right to Request Corrections
If you believe information in your medical record is inaccurate or incomplete, you may request that it be amended.
We may deny certain requests if permitted by law, but we will explain the reason for the denial in writing.
Right to Request Confidential Communications
You may ask us to communicate with you in a particular way or at a particular location.
For example:
Using a different mailing address
Calling only a certain telephone number
Communicating through secure email
We will accommodate reasonable requests whenever possible.
Right to Request Restrictions
You may request restrictions on certain uses or disclosures of your information.
While we are not always required to agree to requested restrictions, we will consider every request carefully.
Right to Receive an Accounting of Disclosures
You may request a list of certain disclosures we have made of your Protected Health Information, as provided by law.
Right to Receive a Paper Copy
You have the right to receive a paper copy of this Notice at any time, even if you have agreed to receive it electronically.
Telehealth Privacy
Dana Stern MD PC provides virtual dermatology consultations using HIPAA-compliant technologies.
Reasonable safeguards are used to protect information shared during telehealth visits and through secure electronic communications.
Patients should participate in telehealth visits from a private location whenever possible to help protect their own privacy.
Our Commitment to Security
We maintain administrative, physical, and technical safeguards designed to protect your Protected Health Information from unauthorized access, use, or disclosure.
Despite these safeguards, no method of electronic communication or storage can be guaranteed to be completely secure.
Questions or Complaints
If you believe your privacy rights have been violated, you may contact our office at any time.
You may also file a complaint with the U.S. Department of Health and Human Services. Filing a complaint will not affect your care or result in retaliation.
Contact Information
Dana Stern MD PC
Website: www.drdanastern.com
Email: info@drdanastern.com
Phone: (917) 971-1864
Effective Date: August 9, 2026
Dana Stern MD PC reserves the right to revise this Notice of Privacy Practices. Any revisions will apply to all Protected Health Information maintained by the practice and will be posted on our Website.