HIPAA Notice of Privacy Practices

Effective Date: January 1, 2026 · Last Updated: January 1, 2026

This notice describes how medical information about you may be used and disclosed and how you can get access to this information. Please review it carefully.

Foundation Medical Group (FMG) and its affiliated clinics, including Foundation Wellness, are required by federal law to protect the privacy of your health information. We’re also required to give you this notice and to follow the terms of the notice currently in effect.

Who This Notice Covers

This notice applies to every clinic operating under Foundation Medical Group, including our offices in Richmond, Virginia; American Fork, Utah; Decatur, Georgia; and Dallas, Texas. It covers the physicians, nurse practitioners, behavioral health providers, and administrative staff who participate in your care.

We use and share your protected health information (PHI) for three main reasons.

Treatment. We share your information with the providers who treat you. If your psychiatrist needs to coordinate medication with your primary care physician, or if a Foundation Wellness clinician consults with an FMG psychiatrist about hormone-related mood symptoms, we may share relevant clinical details.

Payment. We use your information to bill your insurance, collect payments, and confirm coverage. This includes sharing diagnosis codes, treatment dates, and visit summaries with your health plan.

Healthcare operations. We use your information internally for quality reviews, staff training, accreditation, and to run our practice. We may also use de-identified information for research that doesn’t reveal your identity.

We may also share your information without your written authorization in specific situations required or allowed by law:

Public health activities, including reporting communicable diseases or adverse drug events
Reporting suspected abuse, neglect, or domestic violence
Health oversight activities such as audits and inspections
Judicial and administrative proceedings under a valid court order or subpoena
Law enforcement purposes when legally required
Coroners, medical examiners, and funeral directors
Organ and tissue donation
Workers’ compensation claims
Serious threats to health or safety
Specialized government functions, including military and national security

Special Protections for Mental Health and Substance Use Records

Some of our records carry extra protection. Psychotherapy notes (the private session notes a therapist keeps separate from your medical record) generally require your written authorization before we share them. Substance use disorder treatment records are protected under federal regulation 42 CFR Part 2, which sets a higher bar than HIPAA for sharing. We follow both standards.

Uses That Require Your Written Authorization

We won’t share your information for the following purposes without your explicit, written permission:

Marketing communications
Sale of your health information
Most disclosures of psychotherapy notes
Sharing with your employer outside of workers’ compensation
Any use not described in this notice

You can revoke an authorization at any time in writing, except for actions we’ve already taken in reliance on it.

Your Rights

You have the right to:

Inspect and copy your medical record. We may charge a reasonable fee for copies.
Request an amendment if you believe information is incorrect or incomplete. We may deny the request in limited circumstances.
Receive an accounting of certain disclosures we’ve made of your information in the past six years.
Request restrictions on how we use or share your information. We’re not required to agree, except in limited cases involving payment to a health plan.
Request confidential communications at a specific phone number or address.
Receive a paper copy of this notice on request, even if you’ve already received it electronically.
Be notified if a breach of your unsecured PHI occurs.

To exercise any of these rights, contact our privacy officer using the information below.

Filing a Complaint

If you believe your privacy rights have been violated, you can file a complaint with us or with the U.S. Department of Health and Human Services, Office for Civil Rights. We won’t retaliate against you for filing a complaint.

To file a complaint with us, contact our privacy officer in writing. To file with HHS, visit hhs.gov/ocr/privacy or call 1-800-368-1019.

Changes to This Notice

We reserve the right to change this notice. The new notice will apply to information we already have as well as any information we receive in the future. We’ll post the current notice in our offices and on our website at foundationmedicalgroup.org and foundationmedicalwellness.com.

Contact Us

For questions about this notice, to request your records, or to file a privacy complaint:

Privacy Officer Foundation Medical Group 456 E State Street, Suite 1400 American Fork, UT 84003 (800) 983-1974 info@foundationmedicalgroup.org