Notice of Privacy Practices

Who this notice covers

This notice applies to Georgia Brain & Spine Center and to the physicians, nurse practitioners, physical therapists, and staff who provide care at our Johns Creek, Canton, and Atlanta locations. It describes how we may use and share the health information we create or receive about you, and the rights you have over that information.

We are required by law to give you this notice, to follow the terms of the notice currently in effect, and to let you know promptly if a breach occurs that may have compromised the privacy or security of your information.

How we may use and share your health information

We may use and share your health information for the purposes below. Not every example applies to every patient.

Treatment

We may share information with other professionals who are treating you — for example, sending imaging or a consultation note to the physician who referred you, or coordinating physical therapy, injections, or surgery.

Payment

We may share information with your health plan to obtain approval for care, to bill for services, or to collect payment. We may also share information with a billing service acting on our behalf.

Health care operations

We may use information to run the practice — reviewing the quality of care, training staff, coordinating care across our team, arranging appointments, and auditing our own records.

Appointment reminders and treatment options

We may contact you by phone, text, or mail to remind you of an appointment, to give you results, or to tell you about treatment options and health-related services that may interest you.

People involved in your care

We may share information with a family member, friend, or other person you identify as involved in your care or payment for your care. If you are not able to tell us your preference — for example, if you are unconscious — we may share information when we believe it is in your best interest. We will not share information with anyone else without your authorization.

When the law requires it

We will share information when federal, state, or local law requires it, including with the Department of Health and Human Services when it is reviewing our compliance with privacy law.

Public health and safety

We may share information to prevent or control disease, injury, or disability; to report births, deaths, and certain conditions; to report abuse, neglect, or domestic violence; to report reactions to medications or problems with products; and to notify a person who may have been exposed to a disease.

Health oversight

We may share information with agencies that oversee the health care system, such as licensing boards, auditors, and fraud investigators.

Legal proceedings and law enforcement

We may share information in response to a court or administrative order, and in limited circumstances in response to a subpoena, discovery request, or law enforcement request as permitted by law.

Research

We may share information for research when a board has reviewed the plan to protect your privacy, or when the information has been de-identified or is provided to someone preparing a research study.

Organ and tissue donation

We may share information with organizations that handle organ procurement or transplantation.

Workers' compensation

We may share information as authorized by workers' compensation laws and similar programs that provide benefits for work-related injuries or illness.

Military, national security, and inmates

We may share information as required for military and veterans' activities, for national security and intelligence activities, for protective services for the President and others, and with correctional institutions about an inmate.

Serious threats

We may share information when necessary to prevent or lessen a serious and imminent threat to the health or safety of a person or the public.

Uses and disclosures that require your written authorization

We will not use or share your information for marketing, sell your information, or use or share psychotherapy notes without your written authorization. For any other use or disclosure not described in this notice, we will ask for your written authorization first. You may cancel an authorization at any time in writing; the cancellation applies going forward and does not affect actions we already took in reliance on it.

Your rights

You have the following rights regarding the health information we maintain about you. To use any of them, contact our Privacy Officer using the details at the end of this notice.

See and get a copy of your record

You may look at or get a copy of the health information we maintain about you, in paper or electronic form. We will respond within the time the law allows and may charge a reasonable, cost-based fee for copies.

Ask us to correct your record

If you believe information in your record is wrong or incomplete, you may ask us to amend it. We will tell you if we agree, and explain in writing if we do not.

Get a list of disclosures

You may ask for a list of the times we shared your health information, who received it, and why, for up to six years before your request. The list does not include disclosures made for treatment, payment, health care operations, or those you authorized in writing.

Ask us to limit what we use or share

You may ask us not to use or share certain health information for treatment, payment, or operations. We are not required to agree, and we will tell you if we cannot — with one exception: if you pay in full, out of pocket, for a service, we will not share information about that service with your health plan for payment or operations purposes, unless the law requires it.

Ask us to contact you in a specific way

You may ask us to contact you at a particular phone number or address, or by a particular method. We will accommodate reasonable requests and will not ask you to explain why.

Get a paper copy of this notice

You may ask for a paper copy of this notice at any time, and we will give you one promptly. You can also print this page.

Choose someone to act for you

If you have given someone medical power of attorney, or if someone is your legal guardian, that person can exercise your rights and make choices about your health information. We will confirm the person has authority before acting.

File a complaint

If you believe your privacy rights have been violated, you may complain to us or to the U.S. Department of Health and Human Services. We will not retaliate against you for filing a complaint, and your care will not be affected.

Our responsibilities

We are required by law to maintain the privacy and security of your protected health information, to give you this notice of our legal duties and privacy practices, and to follow the terms of the notice currently in effect. We will not use or share your information other than as described here or as you authorize in writing. We will let you know promptly if a breach occurs that may have compromised the privacy or security of your information.

Complaints

You may file a complaint with us by contacting our Privacy Officer using the details below. You may also file a complaint with the federal government:

Office for Civil Rights, U.S. Department of Health and Human Services
200 Independence Avenue, S.W.
Washington, D.C. 20201
Phone: 1-877-696-6775
hhs.gov/ocr/privacy

Changes to this notice

We may change this notice, and the changes will apply to all of the information we maintain, including information created or received before the change. When we change the notice, we will post the new version on this page and make a copy available at our offices, with its effective date.

Contact our Privacy Officer

Privacy Officer
Georgia Brain & Spine Center
9635 Ventana Way
Johns Creek, GA 30022
Phone: 404-446-4424
Email: manager@georgiabrainandspine.comPrivacy questions only—please do not send medical records by email.

Effective date: November 10, 2026. This notice replaces earlier versions of our notice of privacy practices.