Legal · HIPAA

Notice of Privacy Practices

Effective June 14, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

This Notice applies to Magenta Therapy LCSW PLLC and to every clinician and staff member who provides services on its behalf (“Magenta Therapy,” “we,” “us,” or “our”). It describes how we may use and disclose your protected health information (“PHI”) to carry out treatment, payment, and health care operations, and the rights you have regarding that information.

All care at Magenta Therapy is provided by telehealth to clients located in New York and Connecticut. We are required by federal law (the Health Insurance Portability and Accountability Act, or HIPAA) and by applicable state law to maintain the privacy of your PHI, to give you this Notice of our legal duties and privacy practices, and to follow the terms of the Notice currently in effect.

How we may use and disclose your information

In most situations, we may use and disclose your PHI for treatment, payment, and health care operations without your written authorization, as described below. In every case, we limit what we use or disclose to the minimum necessary to accomplish the purpose, and we never sell your information or use it for marketing or fundraising without your written authorization.

For treatment

We use your health information to provide and coordinate your care. For example, your clinician documents your sessions and may, when clinically appropriate and with your knowledge, consult with another Magenta Therapy clinician or coordinate with a prescriber or primary care provider involved in your care.

For payment

We may use and disclose your information to bill and collect payment for services. For example, if you use insurance or request a superbill, we may share your diagnosis, dates of service, and service codes with your health plan or with you so a claim can be processed.

For health care operations

We may use your information to run our practice, for example, for quality review, clinical supervision and training, scheduling, and administrative functions. Magenta Therapy uses SimplePractice, a HIPAA-compliant electronic health record and telehealth platform, to store records and conduct sessions. SimplePractice acts as our Business Associate under a written agreement that requires it to protect your information.

Appointment reminders and care-related communications

We may contact you to provide appointment reminders or information about treatment options and other services that may be of interest to you. If you would like these communications sent only in a particular way or to a particular place (for example, a specific phone number or email), let us know and we will accommodate reasonable requests.

Disclosures that require your written authorization

The following uses and disclosures will be made only with your written authorization, which you may revoke in writing at any time (the revocation will not apply to actions we already took in reliance on it):

  • Psychotherapy notes. Most disclosures of psychotherapy notes (the separate notes a clinician keeps to document or analyze a session) require your specific authorization.
  • Marketing. Uses or disclosures of your information for marketing purposes.
  • Sale of information. Any disclosure that constitutes a sale of your PHI.
  • Most other uses and disclosures not described elsewhere in this Notice.

Disclosures we may make without your authorization

Federal and state law permit or require us to use or disclose your PHI without your authorization in limited circumstances, including:

  • When required by law, for example, in response to a valid court order or as otherwise mandated by federal, state, or local law.
  • To prevent a serious threat to your health or safety or to the health or safety of another person (including our duty to warn or protect where the law requires it).
  • Suspected abuse or neglect of a child, an elderly person, or a vulnerable adult, as required by mandatory reporting laws.
  • Public health activities, such as reporting required by public health authorities.
  • Health oversight activities, such as audits or investigations by licensing or government agencies.
  • Judicial and administrative proceedings, in response to a lawful subpoena or order, subject to the protections of applicable law.
  • Law enforcement, coroners, or medical examiners, in the limited circumstances the law allows.
  • Workers’ compensation, as authorized by and to the extent necessary to comply with those laws.
  • Specialized government functions, such as certain military, national security, or correctional purposes.

Several of these disclosures are subject to stricter limits under New York and Connecticut law, as described below.

Special protections for mental health information

Mental health records receive heightened protection. Where the New York Mental Hygiene Law, Connecticut law, or any other applicable state law is more protective of your information than HIPAA, we follow the more protective standard. In practice, this means we will generally seek your authorization before disclosing your mental health information, except in the narrow circumstances where the law specifically permits or requires disclosure without it (such as an imminent risk of serious harm or a mandated report).

Certain categories of information carry additional protection under state and federal law and generally require your specific authorization to disclose, including HIV-related information (protected in New York under Article 27-F of the Public Health Law), records relating to substance use disorder treatment (where 42 CFR Part 2 applies), and genetic information (protected under the Genetic Information Nondiscrimination Act). We treat these categories with the heightened protection the law requires.

Your rights

You have the following rights regarding the health information we maintain about you. To exercise any of them, contact our Privacy Officer using the information at the end of this Notice. To learn more about your rights under HIPAA, you can visit the U.S. Department of Health and Human Services at hhs.gov/hipaa/for-individuals.

  • Access and copies. You may inspect and request a copy of your record, in paper or electronic form. We may charge a reasonable, cost-based fee, and in limited cases may deny access as the law allows.
  • Amendment. You may ask us to correct information you believe is inaccurate or incomplete. We may decline in certain cases and will explain why in writing.
  • Accounting of disclosures. You may request a list of certain disclosures we made of your information outside of treatment, payment, and operations.
  • Restrictions. You may ask us to limit how we use or disclose your information. We will try to honor reasonable requests but are not required to agree, except that we must agree to restrict a disclosure to a health plan for a service you paid for in full out of pocket.
  • Confidential communications. You may ask us to contact you in a specific way or at a specific location, for example, by a particular phone number or email.
  • Paper copy. You may request a paper copy of this Notice at any time, even if you agreed to receive it electronically.
  • Breach notification. You have the right to be notified if a breach of your unsecured health information occurs.
  • Revoke authorization. Where you have given a written authorization, you may revoke it in writing at any time.

Our responsibilities

  • We are required by law to maintain the privacy and security of your PHI and to notify you following a breach of unsecured PHI.
  • We must follow the duties and privacy practices described in this Notice and give you a copy of it. When you begin care, we will ask you to acknowledge that you received this Notice; if we are unable to obtain your written acknowledgment, we will document our good-faith effort to do so.
  • We will not use or share your information other than as described here unless you tell us we may, in writing. If you give us written authorization, you may revoke it at any time.

Changes to this Notice

We may change the terms of this Notice at any time, and the changes will apply to all information we maintain. The current Notice will always be posted on this website with its effective date, and a copy is available on request.

Questions and complaints

If you have questions about this Notice or believe your privacy rights have been violated, you may contact our Privacy Officer. You may also file a complaint with the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint.

Privacy Officer, Magenta Therapy

U.S. Department of Health and Human Services, Office for Civil Rights

This Notice governs protected health information collected in the course of clinical care. For information collected through this website, see our Terms & Privacy Policy.

Scroll to Top