NOTICE OF PRIVACY PRACTICES
Effective Date: February 16, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
OUR LEGAL DUTY
Alicia M. Todd, Ph.D.
is required by law to:
WHAT IS PROTECTED HEALTH INFORMATION (PHI)?
Protected Health Information (PHI) is information that:
HOW WE MAY USE AND DISCLOSE YOUR INFORMATION
1. For Treatment
We may use and disclose your PHI to provide, coordinate, or manage your care.
If you receive substance use disorder treatment services, your written consent may be required before certain disclosures are made, as required under 42 CFR Part 2.
2. For Payment
We may use and disclose your PHI to obtain payment for services provided, including:
3. For Healthcare Operations
We may use your PHI for:
4. As Required by Law
We may disclose your PHI when required by:
5. To Prevent Serious Threats
We may disclose PHI to prevent or lessen a serious and imminent threat to your health or safety or the safety of another person, as permitted by law.
6. Abuse or Neglect Reporting
Virginia law requires healthcare providers to report suspected abuse, neglect, or exploitation of:
SPECIAL PROTECTIONS FOR SUBSTANCE USE DISORDER RECORDS
(42 CFR PART 2)
If you receive substance use disorder (SUD) treatment services from this practice, federal law provides additional privacy protections.
Under 42 CFR Part 2:
REDISCLOSURE OF INFORMATION
Information disclosed pursuant to HIPAA or 42 CFR Part 2 may be subject to redisclosure by the recipient and may no longer be protected under federal privacy laws once disclosed, depending on the recipient and applicable legal requirements.
While this practice takes reasonable steps to safeguard your information, we cannot control how third parties handle information once lawfully disclosed to them.
BREACH NOTIFICATION
If a breach occurs involving your unsecured protected health information, including substance use disorder records, you will be notified as required by federal law.
ELECTRONIC COMMUNICATION
This practice uses Google Workspace under a signed Business Associate Agreement (BAA) to support HIPAA-compliant email services.
While reasonable safeguards are in place, email and electronic communications may carry some level of risk. You may request alternative communication methods if preferred.
YOUR RIGHTS
You have the right to:
Inspect and Obtain a Copy
Request access to your health records, subject to limited exceptions.
Request an Amendment
Request corrections to your record if you believe it is inaccurate or incomplete.
Request Restrictions
Request limits on certain uses or disclosures of your PHI. We are not required to agree to all requested restrictions.
Request Confidential Communications
Request communication by alternative means or at alternative locations.
Receive an Accounting of Disclosures
Request a list of certain disclosures made outside of treatment, payment, and healthcare operations.
Receive a Paper Copy of This Notice
You may request a paper copy of this Notice at any time.
COMPLAINTS
If you believe your privacy rights have been violated, you may file a complaint with:
Privacy Contact:
Practice Name: Alicia M. Todd, Ph.D.
11654 Plaza America Drive
#507
Reston, Virginia 20190-4700
You may also file a complaint with:
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
1-877-696-6775
www.hhs.gov/ocr
Virginia Department of Health Professions
9960 Mayland Drive, Suite 300
Henrico, VA 23233
www.dhp.virginia.gov
You will not be retaliated against for filing a complaint.
CHANGES TO THIS NOTICE
We reserve the right to change this Notice. Any revised Notice will apply to all protected health information maintained by this practice and will be posted on our website with an updated effective date.
Effective Date: February 16, 2026
THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN ACCESS THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.
OUR LEGAL DUTY
Alicia M. Todd, Ph.D.
is required by law to:
- Maintain the privacy and security of your protected health information (PHI)
- Provide you with this Notice of Privacy Practices
- Follow the terms of this Notice currently in effect
- Notify you if a breach of your unsecured PHI occurs
- The Health Insurance Portability and Accountability Act (HIPAA)
- The Health Information Technology for Economic and Clinical Health (HITECH) Act
- 42 CFR Part 2 (Confidentiality of Substance Use Disorder Patient Records)
- Applicable laws of the Commonwealth of Virginia
WHAT IS PROTECTED HEALTH INFORMATION (PHI)?
Protected Health Information (PHI) is information that:
- Identifies you, and
- Relates to your physical or mental health condition,
- The care you receive, or
- Payment for your care.
HOW WE MAY USE AND DISCLOSE YOUR INFORMATION
1. For Treatment
We may use and disclose your PHI to provide, coordinate, or manage your care.
If you receive substance use disorder treatment services, your written consent may be required before certain disclosures are made, as required under 42 CFR Part 2.
2. For Payment
We may use and disclose your PHI to obtain payment for services provided, including:
- Billing insurance
- Verifying coverage
- Processing claims
3. For Healthcare Operations
We may use your PHI for:
- Practice management
- Quality improvement
- Compliance activities
- Professional supervision
- Administrative functions
4. As Required by Law
We may disclose your PHI when required by:
- Federal law
- Virginia law
- Court order
- Valid legal process (subject to applicable privacy protections)
5. To Prevent Serious Threats
We may disclose PHI to prevent or lessen a serious and imminent threat to your health or safety or the safety of another person, as permitted by law.
6. Abuse or Neglect Reporting
Virginia law requires healthcare providers to report suspected abuse, neglect, or exploitation of:
- Children
- Vulnerable adults
- Incapacitated individuals
SPECIAL PROTECTIONS FOR SUBSTANCE USE DISORDER RECORDS
(42 CFR PART 2)
If you receive substance use disorder (SUD) treatment services from this practice, federal law provides additional privacy protections.
Under 42 CFR Part 2:
- Your SUD treatment records may be used or disclosed for treatment, payment, and healthcare operations only as permitted by law and generally with your written consent.
- A single written consent may authorize future uses and disclosures for these purposes.
- You may revoke your consent in writing at any time, except to the extent action has already been taken based on your consent.
- Medical emergencies
- Public health reporting as required by law
- Court orders that meet federal requirements
- Audit or evaluation activities
REDISCLOSURE OF INFORMATION
Information disclosed pursuant to HIPAA or 42 CFR Part 2 may be subject to redisclosure by the recipient and may no longer be protected under federal privacy laws once disclosed, depending on the recipient and applicable legal requirements.
While this practice takes reasonable steps to safeguard your information, we cannot control how third parties handle information once lawfully disclosed to them.
BREACH NOTIFICATION
If a breach occurs involving your unsecured protected health information, including substance use disorder records, you will be notified as required by federal law.
ELECTRONIC COMMUNICATION
This practice uses Google Workspace under a signed Business Associate Agreement (BAA) to support HIPAA-compliant email services.
While reasonable safeguards are in place, email and electronic communications may carry some level of risk. You may request alternative communication methods if preferred.
YOUR RIGHTS
You have the right to:
Inspect and Obtain a Copy
Request access to your health records, subject to limited exceptions.
Request an Amendment
Request corrections to your record if you believe it is inaccurate or incomplete.
Request Restrictions
Request limits on certain uses or disclosures of your PHI. We are not required to agree to all requested restrictions.
Request Confidential Communications
Request communication by alternative means or at alternative locations.
Receive an Accounting of Disclosures
Request a list of certain disclosures made outside of treatment, payment, and healthcare operations.
Receive a Paper Copy of This Notice
You may request a paper copy of this Notice at any time.
COMPLAINTS
If you believe your privacy rights have been violated, you may file a complaint with:
Privacy Contact:
Practice Name: Alicia M. Todd, Ph.D.
11654 Plaza America Drive
#507
Reston, Virginia 20190-4700
You may also file a complaint with:
U.S. Department of Health and Human Services
Office for Civil Rights
200 Independence Avenue, S.W.
Washington, D.C. 20201
1-877-696-6775
www.hhs.gov/ocr
Virginia Department of Health Professions
9960 Mayland Drive, Suite 300
Henrico, VA 23233
www.dhp.virginia.gov
You will not be retaliated against for filing a complaint.
CHANGES TO THIS NOTICE
We reserve the right to change this Notice. Any revised Notice will apply to all protected health information maintained by this practice and will be posted on our website with an updated effective date.
