Notice of Privacy Practices

Effective Date: January 1, 2026  •  Required by HIPAA (45 C.F.R. § 164.520)

This notice describes how your medical information may be used and disclosed, and how you may access it.

We are required by law to maintain the privacy of your protected health information, to follow the practices described in this notice, and to provide you with a copy of this notice upon request. A printed copy is available at our office at any time.

Our commitment to your privacy

We are committed to protecting your health information. Federal law — specifically the Health Insurance Portability and Accountability Act (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act — requires us to safeguard your protected health information (“PHI”). California law provides additional protections through the Confidentiality of Medical Information Act (CMIA). Together, these laws govern how we collect, use, and share your information.

How we use and share your information

We use your health information in the normal course of providing care. We may use and share it for three core purposes without asking for your separate written authorization:

• Treatment — to provide, coordinate, and manage your care, and to communicate with other providers involved in your treatment.

• Payment — to bill your insurance and collect payment for services.

• Healthcare operations — for internal quality review, staff training, audits, and administrative functions.

We may also use or share your information when required or permitted by law, including for:

• Public health reporting (e.g., communicable disease reporting)

• Responses to lawful court orders, subpoenas, or law enforcement requests

• Oversight of the healthcare system by regulatory agencies

• Workers’ compensation programs

• Preventing a serious threat to health or safety

For anything else — including most marketing uses or sharing with people not involved in your care — we will ask for your written authorization first. You may revoke that authorization at any time in writing.

Specially protected information

California law provides extra protection to certain sensitive categories of health information, including:

• Mental health records

• HIV/AIDS status

• Substance use disorder treatment

• Genetic information

• Reproductive health information

We apply additional safeguards to this information and will not share it without your express written authorization, unless required by law.

Your rights

You have the following rights regarding your health information. To exercise any of them, please submit a written request to our office (contact information below).

• Access: You may review your records in person during business hours within 5 working days of your request. Copies of your medical and billing records (excluding psychotherapy notes) will be provided within 15 days.

• Electronic access: You may request that your records be provided to you in an electronic format.

• Amendment: If you believe your records are inaccurate or incomplete, you may request a correction. We will respond within 60 days.

• Accounting of disclosures: You may request a list of any non-routine disclosures we have made of your information in the past six years.

• Restrictions on use or disclosure: You may ask us to limit how we use or share your information. We are not always required to agree, but we must honor any request to restrict disclosure to an insurer when you pay for a service entirely out of pocket.

• Confidential communications: You may ask us to contact you only at a specific address or by a specific method (e.g., only by mail, not by phone). We will accommodate reasonable requests.

• Complaint: If you believe your privacy rights have been violated, you may file a complaint with our office or directly with the U.S. Department of Health and Human Services Office for Civil Rights. You will not face any retaliation or penalty for filing a complaint.

Changes to this notice

We may update this notice from time to time. Any revised notice will apply to all health information we hold, including information we received before the revision. The most current version will always be posted here and displayed in our office. You may request a printed copy at any time.

Communication preferences

By providing your contact information, you consent to receive appointment reminders and other health-related communications by phone or email. Our communication systems are HIPAA-compliant. If you prefer to receive information only by mail, or would like to opt out of certain types of communications, please let us know in writing.

Contact us & file a complaint

To exercise any of your rights, request a printed copy of this notice, or file a privacy complaint, please contact us:

Aaron Chiang, M.D.
2080 Century Park East, Suite 1605
Los Angeles, CA 90067
Tel: 310.620.1888  •  Fax: 310.203.8996
Email: Privacy@AaronChiangMD.com

You may also file a complaint directly with the federal government:

U.S. Department of Health and Human Services, Office for Civil Rights
www.hhs.gov/ocr  •  1-800-368-1019 (toll-free)  •  1-800-537-7697 (TTY)