Notice of Privacy Practices of The Family MD

THE FAMILY MD  |  

Effective date: November 4, 2026

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

THIS NOTICE ALSO DESCRIBES:
• HOW HEALTH INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED
• YOUR RIGHTS WITH RESPECT TO YOUR HEALTH INFORMATION
• HOW TO FILE A COMPLAINT CONCERNING A VIOLATION OF THE PRIVACY OR SECURITY OF YOUR HEALTH INFORMATION, OR OF YOUR RIGHTS CONCERNING YOUR INFORMATION

YOU HAVE A RIGHT TO A COPY OF THIS NOTICE (IN PAPER OR ELECTRONIC FORM) AND TO DISCUSS IT WITH OUR PRIVACY OFFICER AT 516-390-3553 OR FrontDesk@TheFamilyMD.com IF YOU HAVE ANY QUESTIONS.

The Family MD is operated by Island Daily Medical PLLC, a physician-owned professional medical practice. Medical care is provided by licensed physicians practicing through the organization. This notice describes the privacy practices of Island Daily Medical PLLC and its workforce with respect to protected health information maintained by the practice. It does not shift the practice’s legal obligations to individual physicians.

This combined HIPAA Notice of Privacy Practices and 42 CFR Part 2 Patient Notice explains your rights, our duties, and when we may use or disclose information about your health. The Family MD, operated by Island Daily Medical PLLC, is a federally assisted substance use disorder treatment program subject to 42 CFR Part 2. Part 2 protects identifying substance use disorder records maintained in connection with our program. We also provide other telehealth services, including urgent care, and comply with HIPAA and stricter applicable state requirements. Not every type of information is subject to the same restrictions; when Part 2 or another law gives greater protection, we follow it.

Your Rights — At a Glance

  • Get an electronic or paper copy of your medical records.
  • Ask us to correct certain information in your records.
  • Request confidential communications and restrictions on certain disclosures.
  • Request an accounting of certain disclosures of your information.
  • Choose an authorized personal representative.
  • Get a copy of this Notice and file a privacy complaint without retaliation.

1. Your Rights and How to Exercise Them

Access and copies of records

You may ask to inspect or obtain an electronic or paper copy of your medical record and other information in the designated record set. We generally respond within 30 days as required by HIPAA, subject to permitted extensions and any stricter applicable state requirements. We may charge a reasonable, legally permitted cost-based fee. Certain limited exceptions to access apply. If we deny access, we will explain the reason and any available review rights.

Corrections to your records

You may ask us to amend information you believe is incorrect or incomplete. We generally respond within 60 days, subject to permitted extensions. If we deny a request, we will explain why in writing and describe your right to submit a statement of disagreement when applicable.

Confidential communication preferences

You may ask us to contact you in a particular way or at a particular location—for example, by phone rather than email. We will accommodate reasonable requests and will not require you to explain why you are making the request. Standard text and email communications may carry privacy risks; please tell us if you prefer another available method.

Limits on uses or disclosures

You may request restrictions on uses or disclosures for treatment, payment, or healthcare operations. We are not always required to agree, except that if you pay in full out of pocket for a specific healthcare item or service, you generally may require us not to disclose information about that item or service to a health plan for payment or healthcare operations, unless disclosure is required by law. Special rules apply to records protected by 42 CFR Part 2.

Accounting of disclosures

For HIPAA records, you may request an accounting of certain disclosures during the preceding six years, subject to legal exceptions. One accounting in 12 months is generally free. For Part 2 records, you also have rights to accountings and to lists of disclosures through qualifying intermediaries, as applicable under 42 CFR 2.24 and 2.25. The new three-year electronic Part 2 accounting requirement becomes operational on a future compliance date linked to the corresponding HIPAA rule; we will honor it when effective.

Personal representatives and copies of this Notice

A legally authorized personal representative may exercise your rights, subject to applicable laws and safeguards. You can request a paper copy of this Notice at any time, even if you previously received it electronically.

How to submit a request

Contact our Privacy Officer at FrontDesk@TheFamilyMD.com or call/text 516-390-3553. We may ask for reasonable identity verification. When the law requires a written request or authorization, we will explain what is needed.

2. Your Choices

You may tell us your preferences about disclosures to family, friends, caregivers, or other people involved in your care or payment for care, and certain disclosures during disaster relief. If you are unable to tell us your wishes, we may act as permitted by law and in your best interest. We do not operate a hospital directory.

We do not currently use Part 2 records for fundraising solicitations. If we decide to do so, we will first give you a clear, conspicuous opportunity to opt out of fundraising communications. You may choose not to receive such communications. If we adopt fundraising activities, we will update this Notice and follow applicable law.

You may revoke a written authorization or applicable Part 2 consent by notifying us in writing, except to the extent that we or another authorized party have already acted in reliance on it, or where law otherwise limits revocation.

3. How We Usually Use or Disclose Health Information

Treatment

We may use health information to evaluate you, provide medical care, prescribe medications when appropriate, and coordinate your treatment with other healthcare professionals as permitted by law. Example: a treating physician reviews your medication list and communicates relevant prescription information to your chosen pharmacy.

Payment

We may use or disclose information to process charges, payments, refunds, and permitted billing activities. We operate as a self-pay practice, but payment-related disclosures may still occur to payment processors or others as lawfully necessary. Example: our authorized payment processor receives transaction information to process a visit payment.

Healthcare operations

We may use or disclose health information to manage the practice, oversee quality and safety, conduct permissible audits, train staff, and support compliant administrative services. Example: authorized personnel review records to assess whether required intake and consent documentation has been completed.

For substance use disorder records protected by Part 2, treatment, payment, and healthcare operations uses or disclosures generally require a Part 2-compliant written consent unless a specific exception applies. You may provide one written consent covering future uses and disclosures for treatment, payment, and healthcare operations. You may also choose a more limited consent as allowed by law. Receiving treatment does not, by itself, authorize disclosures that require Part 2 consent. For example, with a valid Part 2 consent we may provide SUD medication information to an outside treating clinician or pharmacy, or use the information for practice operations. We will not treat ordinary HIPAA permissions as overriding Part 2 restrictions.

4. Other Uses and Disclosures Permitted or Required by Law

HIPAA permits certain uses and disclosures without authorization, but Part 2 has narrower exceptions. The examples below apply to Part 2 records only when a specific Part 2 permission or exception is satisfied; otherwise, we obtain the required written consent. Other applicable state laws may impose additional limitations.

  • Public health and safety activities, including disease reporting, product recalls, and reporting certain adverse events.
  • Reports of suspected abuse, neglect, or domestic violence, when legally permitted or required.
  • Preventing or reducing a serious and imminent threat to health or safety, as permitted by law.
  • Health oversight, audits, investigations, and compliance reviews authorized by law.
  • Research when the applicable legal requirements are met.
  • Compliance with federal or state laws, including disclosures to the U.S. Department of Health and Human Services to assess compliance.
  • Workers’ compensation, certain lawful law-enforcement or government requests, and judicial or administrative proceedings when applicable legal conditions are satisfied.
  • Medical examiners, coroners, or funeral directors, and organ or tissue donation organizations, when relevant and permitted.
  • Certain emergency treatment disclosures and other exceptions expressly permitted by applicable law.

A request, subpoena, or court order does not automatically authorize disclosure of specially protected addiction-treatment records. We evaluate such requests under the law applicable to the particular records.

5. Special Protections for Substance Use Disorder Records (42 CFR Part 2)

The Family MD is a federally assisted Part 2 program. Identifying substance use disorder records we create or maintain in connection with that program are subject to 42 CFR Part 2. We also follow HIPAA and any more protective applicable state law. These protections apply to relevant records regardless of whether a patient receives treatment by phone or video.

  • Consent: We generally obtain a Part 2-compliant written consent before disclosing identifying SUD records outside the program or otherwise using or disclosing them where consent is required, unless a specific exception permits or requires disclosure. You may give one consent for all future treatment, payment, and healthcare operations uses or disclosures, and you may revoke consent in writing as permitted by 42 CFR 2.31 and 2.35; revocation does not undo actions already taken in lawful reliance on it.
  • Limited exceptions without Part 2 patient consent include communications within our program or with qualifying service organizations under applicable agreements; bona fide medical emergencies; specified audits and evaluations; qualifying research; reports of suspected child abuse or neglect as required by law; limited reports of crimes or threats against program personnel or on program premises; certain cause-of-death activities; and certain disclosures under properly issued Part 2 court orders. Each exception has its own conditions, and the scope of disclosure is limited by law.

Examples of permitted disclosures without Part 2 consent: Within the program, authorized physicians and staff may access records as needed to provide care; qualifying contractors may assist under lawful agreements. During a bona fide medical emergency, relevant records may be disclosed to responding personnel. For a required child-abuse report, only information permitted or required by the applicable reporting law is disclosed. Authorized auditors may review records under safeguards that prevent improper reuse. Other activities such as research or a legal proceeding require the specific conditions set by Part 2.

  • Legal proceedings: Part 2 records or testimony communicating their contents may not be used or disclosed in civil, criminal, administrative, or legislative proceedings against you without your specific written consent or a qualifying Part 2 court order. Where required, a court order follows notice and an opportunity to be heard by you or the record holder. Even with a court order, a subpoena or other lawful mandate compelling disclosure must also accompany it before the information is used or disclosed.
  • Redisclosure: If you give written consent for treatment, payment, or healthcare operations disclosures to a Part 2 program, HIPAA-covered entity, or business associate, the recipient may further use or disclose the records as HIPAA permits, subject to the special Part 2 restrictions on proceedings against you and other applicable limitations. For other disclosures, specific Part 2 restrictions may continue to apply.
  • Your Part 2 rights include requesting restrictions on disclosures after treatment/payment/operations consent; obtaining restrictions on disclosures to a health plan for a service you paid for in full out of pocket (unless required by law); obtaining this notice in paper or electronic form; discussing it with our Privacy Officer; opting out of fundraising communications; and requesting applicable accountings and intermediary disclosure lists.

Special consent for SUD counseling notes

If we maintain SUD counseling notes as defined by Part 2, a separate written consent is generally required for their use or disclosure, subject to narrow legal exceptions. Consent for those notes is not combined with consent for other Part 2 records.

Special requirements for proceedings and investigations

Consent to use or disclose Part 2 records in civil, criminal, administrative, or legislative proceedings against a patient must be separate from consent for other disclosures. We evaluate legal demands individually and will not treat a routine subpoena as sufficient for disclosure of Part 2 records.

6. Uses and Disclosures Requiring Written Authorization

We will obtain your written authorization whenever required by HIPAA, Part 2, or other applicable law. Examples include most uses and disclosures of psychotherapy notes, uses or disclosures for marketing that require authorization, and any sale of protected health information where authorization is required. Other purposes not described or permitted in this Notice generally require written authorization. You may revoke an authorization as explained above.

Health information disclosed as lawfully permitted may, in some circumstances, be redisclosed by the recipient and no longer protected by HIPAA. Other laws—including Part 2 and state confidentiality laws—may continue to restrict redisclosure.

7. Additional Protections Under State and Federal Law

Some categories of health information—including certain mental health, HIV-related, genetic, reproductive health, and substance use disorder information—may receive additional protections under applicable federal or state law. We follow those more restrictive requirements when they apply, including any applicable requirements for patient authorization or other safeguards before disclosure.

8. Electronic Systems, Telehealth, and Communication

We use electronic records, scheduling, prescribing, payment, telehealth, and communication systems to support patient care and practice operations. Authorized service providers may process protected health information on our behalf under appropriate legal and contractual arrangements, including Business Associate Agreements where required.

We may communicate about appointments, intake forms, prescriptions, and related administrative matters by phone, text, email, or secure electronic methods consistent with applicable law and your preferences. Standard text and email may pose privacy risks. You can request reasonable confidential communication arrangements by contacting us.

9. Our Responsibilities

  • Maintain the privacy and security of protected health information as required by law.
  • Provide this Notice and follow the duties and practices described in the version currently in effect.
  • Provide legally required notice following a breach of unsecured protected health information.
  • Use or disclose health information only as permitted or required by law, or with appropriate authorization or consent.
  • Honor legally required patient rights, including access, amendment, and complaint rights.

We may revise this Notice and make a revised Notice effective for information already held and information received later, as permitted by law. Material revisions will be posted promptly at https://thefamilymd.com/hipaa/ and made available upon request.

10. How and When We Provide This Notice

We inform patients that federal law protects the confidentiality of SUD patient records at admission and provide this Notice no later than the first service, including telehealth services (or as soon as reasonably practicable in an emergency). For online first-service requests, we provide electronic notice automatically and contemporaneously as required by Part 2. We prominently post this Notice at https://thefamilymd.com/hipaa/ and make paper or electronic copies available on request. We may email the Notice where the patient has agreed to electronic delivery; if we know delivery failed, we arrange a paper copy. Patients may always request a paper copy.

11. Questions, Requests, and Complaints

The Family MD | Island Daily Medical PLLC

Privacy Officer  •  Phone / Text: 516-390-3553  •  Fax: 516-390-3773

Email: FrontDesk@TheFamilyMD.com  •  Website: https://thefamilymd.com

You may contact our Privacy Officer about this Notice, exercise your rights, or file a privacy complaint. We will not retaliate against you for filing a complaint or exercising your rights.