Privacy policy.
Last Updated: May 26, 2025
Shon Oren - Integrative Psychotherapy
Shon Oren, MSW, LCSW (MA), LMSW (NY)
763 Massachusetts Avenue, Suite 7, Cambridge, MA 02139
Email: connect@shonoren.com
I. OUR PLEDGE REGARDING HEALTH INFORMATION
I understand that health information about you and your health care is personal. I am committed to protecting health information about you. I create a record of the care and services you receive from me. I need this record to provide you with quality care and to comply with certain legal requirements.
This notice applies to all records of your care generated by this mental health practice. This notice describes how I may use and disclose health information about you, your rights to the health information I keep about you, and my obligations regarding the use and disclosure of your health information.
I am required by law to:
Ensure that Protected Health Information (PHI) that identifies you is kept private
Provide you with this notice of my legal duties and privacy practices
Follow the terms of the notice currently in effect
Notify you if there is a breach of your unsecured PHI
II. HOW I MAY USE AND DISCLOSE HEALTH INFORMATION ABOUT YOU
A. Uses and Disclosures for Treatment, Payment, and Healthcare Operations
I may use or disclose your PHI for treatment, payment, and healthcare operations purposes with your written authorization.
Treatment: I may use and disclose your PHI to provide, coordinate, or manage your healthcare and related services. This includes consultation with other healthcare providers regarding your treatment and referrals to other providers for treatment.
Payment: I may use and disclose your PHI to obtain payment for services provided to you, including determinations of eligibility and coverage and other utilization review activities.
Healthcare Operations: I may use and disclose your PHI for healthcare operations, including quality assessment activities, training programs, accreditation, certification, licensing, or credentialing activities.
B. Other Uses and Disclosures That Do Not Require Your Authorization
I may use or disclose your PHI without your authorization in the following circumstances:
Required by Law: When disclosure is required by federal, state, or local law, judicial or administrative proceedings, or law enforcement.
Public Health Activities: Including reporting suspected child, elder, or dependent adult abuse, or preventing or reducing a serious threat to anyone's health or safety.
Health Oversight Activities: To health oversight agencies for activities authorized by law, including audits and investigations.
Judicial and Administrative Proceedings: In response to a court order, although my preference is to obtain an Authorization from you before doing so.
Law Enforcement: For law enforcement purposes, including reporting crimes occurring on my premises.
Coroners, Medical Examiners, and Funeral Directors: To identify a deceased person or determine cause of death.
Research: For research purposes under strict privacy protections.
Serious Threat to Health or Safety: To prevent or lessen a serious and imminent threat to health or safety.
Workers' Compensation: For workers' compensation purposes under applicable law.
Military and National Security: For military, national security, and intelligence activities.
C. Uses and Disclosures Requiring Your Written Authorization
Psychotherapy Notes: I maintain "psychotherapy notes" as defined in 45 CFR § 164.501. Any use or disclosure of such notes requires your Authorization unless the use or disclosure is:
For my use in treating you
For my defense in legal proceedings instituted by you
Required by law
For health oversight activities concerning the originator of the notes
To avert a serious threat to health or safety
Marketing: I will not use or disclose your PHI for marketing purposes without your authorization.
Sale of PHI: I will not sell your PHI without your authorization.
III. YOUR RIGHTS REGARDING YOUR HEALTH INFORMATION
Right to Request Restrictions: You have the right to request restrictions on uses and disclosures of your PHI for treatment, payment, or healthcare operations. I am not required to agree to your request unless you are asking me to restrict disclosure to a health plan for payment or healthcare operations purposes and you have paid for the service out of pocket in full.
Right to Receive Confidential Communications: You have the right to request that I communicate with you in a certain way or at a certain location.
Right to Inspect and Copy: You have the right to inspect and copy your PHI, with some exceptions. I may charge a reasonable fee for copying.
Right to Amend: You have the right to request amendment of your PHI if you believe it is incorrect or incomplete.
Right to an Accounting of Disclosures: You have the right to receive a list of disclosures of your PHI made by me, except for disclosures for treatment, payment, healthcare operations, and certain other purposes.
Right to a Paper Copy: You have the right to obtain a paper copy of this notice upon request.
Right to Complain: You have the right to complain to me or to the Secretary of Health and Human Services if you believe your privacy rights have been violated.
IV. DATA PROTECTION COMPLIANCE
GDPR Compliance (for EU Residents)
If you are a resident of the European Union, you have additional rights under the General Data Protection Regulation (GDPR):
Right to erasure ("right to be forgotten")
Right to data portability
Right to object to processing
Rights related to automated decision-making
CCPA/CPRA Compliance (for California Residents)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
Right to know what personal information is collected
Right to delete personal information
Right to opt-out of the sale or sharing of personal information
Right to non-discrimination
Right to correct inaccurate personal information
Right to limit use of sensitive personal information
V. CHANGES TO THIS NOTICE
I reserve the right to change this notice and will make the new notice provisions effective for all PHI that I maintain. The new notice will be available upon request and on my website.
VI. SUPERVISION DISCLOSURE
Important Notice: Shon Oren, LCSW (MA), LMSW (NY) practices as a social worker employee under clinical supervision by Hannah Kanter, LICSW, at Healing with Hannah, LLC, in accordance with Massachusetts Board of Registration of Social Workers requirements. Your clinical supervisor may have access to your health information as necessary for supervision and quality assurance purposes.
VII. CONTACT INFORMATION
If you have questions about this notice or want to exercise your rights, please contact:
Privacy Officer: Shon Oren, LCSW
Address: 763 Massachusetts Avenue, Suite 7, Cambridge, MA 02139
Email: connect@shonoren.com
To file a complaint:
Contact me using the information above
File a complaint with the U.S. Department of Health and Human Services Office for Civil Rights at www.hhs.gov/ocr/privacy/hipaa/complaints/